Software permissions can be bypassed, and disabled sensors can sometimes be reactivated through software. That is why SaferPhone takes a more radical approach with its optional hardware modifications: the camera and microphone are physically disconnected from the mainboard.
How does the modification work?
Each device is opened by hand, the relevant camera and microphone modules are identified, and their contact connection to the mainboard is permanently severed. The housing is then properly resealed, and the functionality of the rest of the device (display, battery, speaker, cellular, Wi-Fi) is thoroughly tested.
Why can't this be undone?
The disconnection happens at the physical component level, not via a software flag. There is no repair mode, no factory reset and no firmware update that restores the connection — and that is precisely the point of the modification. Anyone who opts for a modified device should therefore be aware that this step is final. For that reason, we also offer every model in an unmodified version.
What still works?
Exactly which functions are lost depends on whether only the camera, only the microphone, or both are removed. All unaffected functions — display, cellular, Wi-Fi, speaker, battery — remain fully intact. You will find details on the individual modification options on the relevant product page.
For anyone who does not need this radical approach but still wants maximum software security, an unmodified SaferPhone with GrapheneOS and Sandboxed Profile is available too.