Have good privacy practice. Even better if I can get away from 5 Eyes or 9 Eyes.
Have an application for Android that supports auto-sync.
Self-hosting is also an option, but I would prefer a lightweight setup. I checked Immich requirements, but it requires 2 CPU cores and 4 GB memory, which costs way too much if I want to host it on my AWS.