What works for me is a pi-hole at home, a wireguard service on my (dd-wrt) router with the pi-hole functioning as dns server and my phone using wireguard as an always-on vpn.

All traffic on my phone is now routed through the pi-hole at home, which filters out all tracking, wherever I am.