Secure iPhone & Chat Deployment

I’m looking for an expert who can help me turn a batch of standard iPhones into truly secure handsets and set up an encrypted chat environment that we fully control.

The first priority is stripping out every location-based service we legally can: hard-ening iOS settings, disabling background tracking, restricting system services through MDM, and advising on any additional hardware or software tweaks that keep the devices from leaking metadata. The phones will be overseen by a vetted third-party service provider, so part of the job is packaging your solution in a way that team can roll out and maintain without guesswork.

On the communication side I need a private messaging system running on a server we will rent for this purpose. Mandatory features are end-to-end encryption, self-destructing messages, and robust user authentication. I’m open to whether you adapt an existing open-source project (for example a hardened Matrix/Synapse stack, a Signal-compatible fork, or something comparable) or build a lightweight, custom XMPP/OMEMO setup—whichever achieves provable security while keeping administration simple.

Deliverables – all items must be provided for acceptance:
• Written recommendation outlining the final architecture for the phones and the chat server, including risk analysis and compliance notes.
• Step-by-step deployment scripts or profiles for locking down iOS and enrolling devices in the chosen MDM.
• Installation and configuration of the encrypted chat stack on our rented server, fully documented.
• A concise administrator guide for the third-party service provider plus a short user onboarding sheet.
• One live hand-over session (video or in-person) to walk through the system and answer questions.

If you have verifiable experience in iOS hardening, mobile device management, and encrypted communications, I’m ready to move quickly.