To be clear about what Gmail does: Google no longer uses Gmail content to target ads in Gmail itself, a policy change made in 2017. But the data still flows into Google's broader advertising intelligence. Third-party apps you've authorized to access your Gmail — calendar syncing, travel apps, productivity tools — can read your email content under Google's API policies. Researchers at Google have human review processes for email content in some contexts. And Gmail's infrastructure is deeply integrated with US surveillance law.
The FISA court and National Security Letters can compel Google to turn over email content and metadata without notifying you. Gmail's architecture — where Google holds the decryption keys to your email — makes this legally and technically straightforward.
What "Privacy-Focused Email" Actually Requires
"Privacy email" has become a marketing category, and not all services that claim the label actually deliver meaningful protection. The features that matter:
- Zero-knowledge encryption — the provider cannot read your email content, not because of policy, but because they don't hold the keys
- No advertising model — if email content informs advertising, the service is not private by design
- Jurisdiction — where the company operates determines what legal demands it must comply with
- Open-source cryptography — closed-source encryption is an unverifiable claim
- No phone number required — a phone number creates an identity link that undermines pseudonymous use
- Alias support — the ability to use different addresses for different contexts limits how much any single party can track you
The Main Alternatives
ProtonMail
ProtonMail is the category leader for good reasons. Based in Switzerland, genuinely zero-knowledge for emails between Proton users, open-source mobile apps, and a long track record of resisting government pressure within the limits of Swiss law.
The limitations are real: emails to non-Proton users are not end-to-end encrypted unless you use PGP. ProtonMail's free tier is quite limited. The 2021 IP logging incident — where ProtonMail complied with a Swiss court order to log a user's IP address — was a reminder that "Swiss privacy law" is not a magical shield. ProtonMail was transparent about it, but users who had assumed complete anonymity were surprised.
Tutanota
Tutanota (now "Tuta") is a German provider with end-to-end encryption for email, calendar, and contacts. Tuta encrypts emails between Tuta users and supports encrypted emails to outside recipients using a shared password. German law (GDPR) provides meaningful user protections, though Germany is a Five Eyes-adjacent country in terms of intelligence sharing.
Tuta's interface is clean and the pricing is accessible. The main limitation is that Tuta's encryption system is proprietary — it doesn't use PGP, which means you cannot use standard email clients or external key management. You're locked into their ecosystem.
Fastmail
Fastmail is worth mentioning because it often appears in "Gmail alternative" lists, and it deserves clarity: Fastmail is not a private email provider. It is a well-run, fast, and reliable email service based in Australia. It does not offer end-to-end encryption. It cooperates with Australian and US law enforcement. It is a good Gmail alternative if your concern is Google's business model; it is not a meaningful privacy upgrade if your concern is legal access to your email.
Haven
Haven is built around the premise that email privacy requires more than server-side encryption. The architecture is zero-knowledge: your email is encrypted client-side before it reaches our servers, using PGP keys you control. We cannot read your email.
Haven also pairs email with end-to-end encrypted chat using the MLS protocol (RFC 9420), giving you a single encrypted communication system rather than separate tools for email and messaging. Aliases are built-in — you can create separate email identities for different contexts without managing multiple accounts. No phone number is required to create an account.
End-to-end encrypted email only protects messages between users on the same system — or when both parties use PGP. An email from Haven to a Gmail address travels encrypted to Gmail's servers, where Gmail decrypts it to deliver to the inbox. The receiving side's infrastructure determines the security of the final hop.
Comparison at a Glance
| Provider | Zero-Knowledge | No Phone Required | PGP Compatible | Aliases | Jurisdiction |
|---|---|---|---|---|---|
| Gmail | No | Partial | No | Limited | USA |
| ProtonMail | Partial* | Yes | Yes | Yes | Switzerland |
| Tuta | Yes | Yes | No | Yes | Germany |
| Fastmail | No | Yes | No | Yes | Australia |
| Haven | Yes | Yes | Yes | Yes | Canada |
*ProtonMail is zero-knowledge for mail between Proton users; external email is not end-to-end encrypted by default.
The Migration Question
Moving away from Gmail is genuinely inconvenient. Fifteen years of email history, contacts built around a Gmail address, and dozens of services using that address as a login all create real switching costs. A few practical observations:
Aliases make transitions easier. Services that offer aliases let you create new addresses for new accounts while keeping your existing address intact. Over time, you can migrate services to the new provider without a disruptive cutover.
The old address doesn't need to go away immediately. Forwarding from your Gmail address to a new provider lets you receive mail in one place while you transition. Most services support changing their notification email on your account settings page.
The highest-value emails to move first are the most sensitive. Financial, medical, legal, and personal communication carries the most risk if exposed. Moving these first — even while keeping a Gmail address for lower-stakes communication — reduces your exposure materially without requiring a complete migration.
Gmail's dominance is a function of network effects and convenience, not of it being the best product for the people who use it. The alternatives are mature, capable, and for many use cases more functional. The migration friction is real but finite.