The trifecta for digital privacy is encryption, VPN (Virtual Private Network), and a password manager. Signal should be used for instant messaging, rather than platforms that send things in clear text or only encrypt in transit, as they have to have a special setting turned on for things to be encrypted.