One of the quickest and simplest ways you can drastically improve your privacy is by using secure dns/name servers. It costs nothing, takes a couple of seconds and is available in most hardware and software these days.
Attempting to stay secure or preserve your privacy when using android is a futile endeavour. When the company making your entire operating system has the specific goal to harvest your personal information (and sell it to the highest bidder) you simply cannot be either secure nor private. But what are we to do?
We're like beaten dogs. We make fun of people who highlight how fucked this is. 'are you so naive that you don't think this is common practice?' We shouldn't have to expect this. We shouldn't have to endure this.