The short answer: You don’t have to leave Gmail to cut your exposure, but you can. The first step, whether you migrate or not, is to revoke third-party apps that can read your inbox. If you do leave, the strongest privacy options are Proton Mail and Tuta (both end-to-end encrypted), with Fastmail and iCloud Mail as solid non-encrypted alternatives. Move in stages over three to six months, starting with your highest-priority accounts, so you don’t give up and go back.
What Google does with your email
Go to myaccount.google.com > Security > Third-party apps with account access. Look at the list. There are probably apps you forgot existed. A travel booking tool from 2019. A productivity app you tried for a week. A newsletter tool that a job you left three years ago set up on your behalf. Some of these apps have full read access to your Gmail inbox. Not just metadata. Every email, including private messages from your bank, your doctor, and your family.
Google stopped scanning Gmail content directly for ad targeting in 2017. What it didn’t stop is processing your email content for server-side features. That covers Smart Compose, Smart Reply, automatic message categorization, and nudges (“You haven’t replied to this email from last week”). That processing happens on Google’s infrastructure. Your email content is analyzed to generate those responses — even if the output is just a suggested three-word reply.
Then there’s the government request problem. Google receives tens of thousands of government data requests per year and publishes the numbers in its Transparency Report. In the second half of 2023 alone, Google received tens of thousands of requests from US authorities. It complied with data production in a majority of cases. Your Gmail inbox — every email you’ve ever sent or received — sits on Google’s servers, fully accessible to those responses.
None of this means Google is doing something uniquely sinister. It means Gmail is a cloud email service operated by an advertising company, and you should understand what that means before deciding whether to stay.
Review your connected apps first
Before you migrate anything, clean up what’s already there.
Go to myaccount.google.com > Security > Third-party apps with account access. Review every entry. Ask: do I still use this? Is there any reason this app needs full email read access? If the answer to either question is no, click it and select Remove Access.
This is the minimum step — even if you never leave Gmail. Third-party apps with inbox access are a significant privacy and security exposure point. Apps get sold to new owners with different privacy policies. Apps get breached. Apps that were “helpful tools” in 2020 may now be operated by data brokers.
Do this today. It takes ten minutes and requires nothing else to change.
The email alternatives, honestly assessed
You have five real options. Here’s what each one actually offers and where it falls short.
ProtonMail (now rebranded as Proton Mail) is the recommendation for maximum email privacy. It’s based in Switzerland, operates under Swiss law — which has strong privacy protections and no mandatory data retention requirements — and uses end-to-end encryption (E2E) by default. Proton can’t read your email. If served with a government request, they can hand over metadata (account creation date, IP addresses if logging is enabled) but not the content of your messages.
The limitation you need to understand: E2E encryption only works email-to-email within ProtonMail. When you email someone on Gmail, that message is encrypted in transit to Proton’s servers, but it’s sent unencrypted to Gmail — because Gmail doesn’t support the same encryption standard. Proton can’t change this; it’s a fundamental constraint of how email works. Free tier is available. Custom domain starts at $4/month.
Tutanota (now Tuta) is the German alternative. German law and GDPR apply. It’s end-to-end encrypted, fully open source (you can audit the code), and has a free tier. Custom domain from €3/month. Feature set is slightly more limited than ProtonMail — no calendar import from external calendars, fewer third-party integrations — but for straightforward email use, it’s excellent. Same E2E limitation applies: emails to Gmail addresses aren’t end-to-end encrypted on the recipient’s side.
Fastmail is the right choice if you want solid privacy without the trade-offs of E2E encryption. Based in Australia, subject to Australian law (which includes some government access provisions), but Fastmail has a strong track record of transparency. It’s not end-to-end encrypted — Fastmail can technically read your email — but it has no advertising business, no data broker relationships, and has repeatedly pushed back on overreaching requests. The UX is excellent: fast, feature-complete, good custom domain support from $5/month. Best for people who want to leave Gmail for a better-run email service without dramatically changing how email works for them.
Apple iCloud Mail works well if you’re already in the Apple ecosystem. Apple’s Private Relay hides your IP address and Apple has made high-profile stands against government access to user data. iCloud Mail isn’t end-to-end encrypted — but Apple has no advertising business and no incentive to analyze your email content. Limitation: you’re tied to Apple’s ecosystem. $1/month for 50GB of iCloud storage includes Mail.
The migration strategy that actually works
Don’t try to move everything at once. That’s how people give up and go back to Gmail.
Step 1: Create your new address and set up a custom domain if you’re using one. Don’t touch Gmail yet.
Step 2: Update high-priority accounts first — banking, health services, your password manager, government accounts. Do these before anything else.
Step 3: Set a Gmail auto-reply pointing to your new address. Most people won’t read it, but some will.
Step 4: Over 3–6 months, update everything else as you naturally interact with services. Thirty seconds per login is enough.
Step 5: Archive Gmail. Keep the account open — too many things still point to it — but stop using it as your primary address. Check it weekly for stragglers.
Migration takes six months before it feels complete. That’s normal. Your old address is in hundreds of contact books and mailing lists. This is a slow handoff, not a single event.
If you’re not ready to leave yet
Three things you can do today without migrating:
Revoke third-party app access (already covered — do this regardless). Go to Gmail Settings > General and turn off both Smart Compose and Smart Reply — neither feature is worth the content analysis trade-off. In your Google Account, turn off “Web & App Activity” personalization or set auto-delete to 3 months.
Use Gmail through Firefox with uBlock Origin rather than Chrome. And going forward: when any app asks to “connect with Gmail,” say no. Revoke access, stop granting it, and your inbox stops being a shared resource.
What you can do right now
Want to see what data brokers expose about you? See what a scan finds → shows an example report: the kinds of sites that list your name, phone, and address. Once KnytX Shield launches it will find and remove these automatically. Join the waitlist to get in early.