Phone Sentry
LiveDebloat, firewall and back up your Android — no root, all on-device
The problem Phones ship full of pre-installed apps you never chose and trackers you never agreed to — and the usual "debloat" guides are copy-pasted commands that can brick a phone into a permanent boot loop.
How Phone Sentry solves it Phone Sentry inventories every app, rates how safe each is to remove, disables the ones you pick through Shizuku with a saved undo, firewalls apps off the network, and backs up your data — all without root and all on the device.
Status: Live and publicly reachable
About Phone Sentry
Phone Sentry puts you in control of your Android without root. It takes a full inventory of every installed app and rates each one — Safe, Caution, Risky, or Never — for how safe it is to remove, with a plain-language reason for every verdict. When you are ready it disables the ones you choose (no root, through Shizuku), staging each change with a saved recovery script and a one-tap undo, and a compiled-in list of boot-critical packages that can never be selected — so a clean-up never ends in a boot loop or a factory reset. A built-in firewall blocks any app from the network per app, and can filter tracker and ad domains. It also backs up and restores your contacts, calendar, messages and call log to a folder you choose. Everything runs on the device and nothing leaves it. It can also route each app’s traffic through an encrypted VPN tunnel — WireGuard, SSH, or your own Mullvad account — so you filter and tunnel at once, shows per-app CPU usage, audits which apps hold sensitive permissions, flags bloat that returns after an update, and scores your overall privacy posture. An optional on-device AI can give a second opinion, and the app never leaves the device.
What you can do
- Full on-device inventory of every app, each rated Safe / Caution / Risky / Never for removal with a plain-language reason.
- Disable bloatware without root (via Shizuku): staged changes, a saved recovery script, and one-tap undo — with a compiled-in boot-critical denylist that can never be selected.
- Built-in firewall: block any app from the network per app, and filter tracker/ad domains from a blocklist.
- Back up and restore contacts, calendar, SMS and call log to a folder you choose (standard vCard / iCalendar formats).
- Everything runs on the phone. No account, and nothing leaves the device except its own update check.
- Updates itself in-app, verifying the download’s hash and signing certificate before it will install — never silently.
- Encrypted per-app VPN egress — WireGuard, SSH, or your Mullvad account — filter and tunnel at the same time. Plus per-app CPU, a permission auditor, re-bloat detection, a privacy score, and an optional on-device AI opinion.
Who it's for
New phone setup
Strip the pre-installed apps you never chose, safely, before you rely on the device.
Cutting trackers
Firewall chatty apps off the network and block tracker/ad domains device-wide.
Avoiding a bricked phone
Boot-critical packages can never be disabled, and every change has a saved one-tap undo.
Moving phones
Back up contacts, calendar, messages and call log to a folder and restore them on the new device.
Open solution — Phone Sentry (opens in a new tab) Download for Android Back to all solutions
Android 12+ · sideload (enable “Install unknown apps”)