Protective DNS, when set up with a DNS provider that blocks known ad / tracking domains, would help with that. NextDNS, Control-D, and Mullvad all offer this service, for example.
Protonvpn also blocks ads, trackers, malware. With some of my apps needing google play services, I get trackers block constantly on my grapheneos phone.
Edit: I would also mention that I am very selective with my permissions. I don’t grant internet unless absolutely required. Sensors and gyro data are very rarely needed for apps unless it’s navigation. Location permission only for when app is open, nothing in the background. Microphone and camera permission the same too. Though, for proprietary apps that need mic and cam like social media, expect them to watch your face and listen to you all the time, extracting every muscle twitch and word that comes out your mouth.
Protective DNS, when set up with a DNS provider that blocks known ad / tracking domains, would help with that. NextDNS, Control-D, and Mullvad all offer this service, for example.
Mullvad VPN is best one stop shop to get started but the process is so much more than getting a VPN.
A lot of ia behavioural though, hygiene
Protonvpn also blocks ads, trackers, malware. With some of my apps needing google play services, I get trackers block constantly on my grapheneos phone.
Edit: I would also mention that I am very selective with my permissions. I don’t grant internet unless absolutely required. Sensors and gyro data are very rarely needed for apps unless it’s navigation. Location permission only for when app is open, nothing in the background. Microphone and camera permission the same too. Though, for proprietary apps that need mic and cam like social media, expect them to watch your face and listen to you all the time, extracting every muscle twitch and word that comes out your mouth.