So, since you sound like a somewhat higher end user:
1) What platforms do you care about? Do you mainly need service from one fixed location, or from home/office network plus mobile?
2) How close does it need to get to the endpoints? We have 4 exit nodes right now; we'd probably need ~50+ to be very close to most services. There's still a portion which is "in the clear" (although, use https...), but it becomes very impractical for NSA or especially others to passively tap all those locations (since they wouldn't be IXes necessarily, and intra-colo links don't get routed through buildings like ATT 611 Folsom St.
There are 3 platforms I care about, Windows, Android, and Linux.
For the last 2 weeks I've been taking actions that attempt to pull-back my public footprint and re-exert control over my privacy (admittedly illusory) to a point where I feel more comfortable. One of the biggest "oh crap" moments was when I realized my phone is powered by software derived from a Google product.
Windows desktop should be straight forward enough to connect.
Personal Linux server farm with services that are open to the general Internet, but for outbound traffic not related to something I serve, my servers are at the mercy of the security of the feed I have.
As far as how close it has to be to an exit, I'm completely indifferent. There are trade-offs that I'm willing to accept (in some cases, extreme) as I record over 20 years of habitual internet behavior.
If you have a Galaxy Nexus S or similar you could try the FirefoxOS image, the base Linux system on there is quite simple and everything seems to be available in Github. Of course you still have the baseband to worry about, but apart from a few OMAP850s you're going to have a hard time getting away from that.
Actually, with sufficient BGP peering, you can probably reach most major destinations with far less than 50 (CDNs do), and you increase the likelihood that traffic never traverses a telco backbone.
1) What platforms do you care about? Do you mainly need service from one fixed location, or from home/office network plus mobile?
2) How close does it need to get to the endpoints? We have 4 exit nodes right now; we'd probably need ~50+ to be very close to most services. There's still a portion which is "in the clear" (although, use https...), but it becomes very impractical for NSA or especially others to passively tap all those locations (since they wouldn't be IXes necessarily, and intra-colo links don't get routed through buildings like ATT 611 Folsom St.