Your calendar is the most sensitive thing on your phone
More than your email, more than your search history, your calendar is a timestamped record of your life. Here is what to do about it.
Most people think about email first when they decide to take their privacy seriously. That makes sense. Email feels personal. But there is a stronger case that your calendar is the data you should move first.
Your inbox holds what people said to you. Your calendar holds what you actually did.
Every event is a data point: who you met, where you went, how long you stayed, who else was there, how often it recurs. Stack a few years of that and you have a detailed map of a life — relationships, habits, work, health, finances. Timestamped, searchable, structured. Not inferred from ad clicks. Written down by you, in your own words, event by event.
That data is sitting on someone else’s servers. The question is whose, and what they do with it.
Why Google Calendar is not a good option
Google’s business is knowing things about you that you would not think to tell anyone. Your calendar is unusually direct input for that — not browsing behavior that has to be interpreted, not purchase history that has to be matched, but a plain record of where you were and who you were with.
This is not a secret arrangement. It is how the product was designed and how the company makes money. The convenience is real. So is the cost.
For most individuals this registers as a background discomfort more than an active threat. For businesses the math is different. A lawyer’s calendar contains client names and meeting patterns. A security consultant’s calendar is a list of who they are working for and when. A therapist’s calendar is a patient list. A founder’s calendar is a record of every investor, partner, and hire they are in conversation with. In these cases — and in a lot of ordinary small business cases that do not feel dramatic — handing that data to Google is not a neutral choice. It is an exposure.
What you can use instead
There is no single right answer here. It depends on how much control you want, how much you are willing to spend, and whether you want to run anything yourself.
Proton Calendar
Proton Calendar is end-to-end encrypted. Your events are encrypted on your device before they leave it, which means Proton cannot read your calendar data even if compelled to hand it over. That is a meaningful technical distinction from most alternatives, including the privacy-friendly ones that promise not to look but technically could.
The free tier is functional for individuals — one calendar, basic sync across devices. Paid plans add multiple calendars, more storage, and tighter integration with Proton Mail if you are already there. Proton is a Swiss company, which puts it outside the reach of US and EU surveillance frameworks in ways that matter.
You are still trusting a third party. Proton knows you have a calendar. They do not know what is in it. For most people and most businesses, that is a reasonable trade.
Radicale
Radicale is a CalDAV server — small, quiet, written in Python, designed to do one thing. You run it on a cheap VPS or a spare machine at home, and your calendar data lives there. Nobody else is in the picture.
Setup takes an afternoon if you are comfortable with a terminal and a basic Linux server. Maintenance after that is close to zero. It is not glamorous software but it has been around a long time and it works.
The honest downside is that you own the uptime. If your server goes down, your sync stops until you fix it. For someone who is not comfortable troubleshooting a server, this is the wrong tool. For someone who is, it is close to ideal — genuinely private, genuinely yours, and about as low-maintenance as self-hosted software gets.
Nextcloud Calendar
Nextcloud is a broader platform: files, contacts, calendar, tasks. The calendar component is good, but you are setting up and maintaining a larger system to get it.
If you are already running Nextcloud for file storage or team collaboration, adding the calendar is a few clicks. If you are starting from scratch and calendar is all you need, Radicale is a much lighter lift. Nextcloud earns its complexity when you want the full suite.
Personal versus business
For an individual, the concern is mostly surveillance capitalism — behavioral data feeding profiles that benefit advertisers rather than you. Moving to Proton or a self-hosted option stops that entirely.
For a business, the concern is also what your calendar reveals about clients and deals. Who you are meeting with, and how often, is frequently as sensitive as what you discuss. Some industries have legal obligations around that. Most do not, but the exposure is real regardless.
Small businesses without a technical person on staff should start with Proton. The encryption is strong, the setup is straightforward, and there is nothing to maintain. For businesses that have technical resources — internal or hired — a self-hosted option removes the third-party question entirely and is worth the additional work.
Migration is one afternoon
Every major calendar service exports to ICS format — a plain text file of your events. You import that into your new calendar, point your existing apps at the new server, and you are done. Apple Calendar, Thunderbird, and every Android calendar app speak CalDAV natively. You do not need new software on your devices.
If you share calendars with people still on Google Calendar, shared events remain visible to them. Some features are read-only on their end. In practice this is rarely a problem.
Where to start
If you have never run a server and do not want to: create a Proton Calendar account, export your Google Calendar as ICS, import it, and install the app on your phone. A few hours and you are done.
If you are comfortable with a terminal: spin up Radicale on a small VPS, import your ICS file, and point your devices at it. The documentation is clear and the setup is not complicated.
If you are evaluating this for a business without technical staff: Proton Calendar on a paid plan is the answer. If you have someone technical on your team, the conversation about Nextcloud or Radicale is worth having.
You do not have to move everything at once. Your calendar is one afternoon of work, and it is a good place to start — because of what a calendar actually contains, and because most people have not thought about it yet.
$johndoe