Advice For Using Open Hotspots

[CellDaddy]

I am extremely careful about online security at home. Looking for advice about how to be safe when using my D'Inc2 at a public hotspot. Links also appreciated.

Here's what I know so far:

• Do not sign in to a website without a secure connection (e.g., SSL).
• When transferring sensitive data over a non-secured connection (e.g., http, FTP), be sure to encrypt the data first.
• Make sure you're connected to the intended network and not an "evil twin".
• In any case, limit internet use to casual surfing; nothing sensitive like banking or investment accounts.
• Make sure someone is not looking over your shoulder.

I'm particularly interested in preventing someone from connecting to my 'phone e.g., to copy or steal contacts, documents, pictures, etc.

Advice and/or links.