When your traffic leaves the VPN, the operator of the VPN server can see the websites you’re accessing. If you’re accessing unencrypted HTTP websites, the VPN operator can see the full content of the pages. The operator could keep logs on this data, or sell it for advertising purposes.
Let’s put it this way: When you use a VPN, you’re preventing the hotspot at the hotel or airport and your Internet service provider from spying on your traffic. But you’re letting the VPN provider spy on your traffic instead. Why would you trust a free VPN provider you’ve never heard of?
A recent investigation by Metric Labs spotted by The Register drew attention to this problem, discovering the majority of free VPN apps have links to China and 86% of them had unsatisfactory privacy policies. Some explicitly stated they transfer user data to China. Most of them had customer support emails pointing to generic personal email accounts on services like Gmail or Hotmail. These don’t sound like services worthy of your trust.
If you’re using a VPN for privacy or escaping Internet censorship, you probably don’t want to use a VPN based in China.
China aside, you wouldn’t want to use a shady VPN hosted in a country with a less repressive government either. The VPN company may just be capturing and selling your data. Or they may keep lots of logs—and, if you’re using a VPN for something like BitTorrent, you probably don’t want to choose a VPN that logs all your traffic.
What You Should Use Instead
Stay away from free VPNs. It costs a company money to host a VPN server and pay for traffic, so why would that company give you a free service without getting something out of it?As a free VPN for occasional use, we recommend Tunnelbear. This service only gives you 500 MB of data every month, which isn’t much. But it’s well-regarded, and the company’s business model is selling you unlimited VPN data. It’s like a free sample every month, but it can do if you only occasionally need VPN service in a pinch.
If you’re serious about using a VPN for privacy, torrenting, bypassing censorship, or getting around geographical restrictions online, we recommend doing some research and paying for a service you feel is trustworthy. We have a guide for selecting a VPN service. You don’t have to use our top picks but do some research. Your VPN provider sits between you and all your online traffic, and they can see it. You should find a company with a solid privacy policy and reputation. You’ll have to pay for that.
For serious privacy and anonymity, you should check out Tor. Tor is free, but it’s nowhere near as speedy as a VPN. It’s not something you’d want to use for all your Internet traffic.
If you’re an advanced user, you should seriously consider setting up your own VPN. Pay for hosting on a server or cloud service somewhere, install a VPN server, and connect to it. You’re now your own VPN operator—although the hosting service could potentially spy on you. There’s no escaping it.
You’re always placing trust in someone, so choose your VPN service (or hosting company) carefully.
