Free VPNs: Paying for Privacy With Your Privacy
A VPN's entire job is to sit between you and the internet. When it's free, ask who's paying for that seat.
The pitch of a VPN is simple: your traffic goes through our servers, so your internet provider, the coffee-shop Wi-Fi, and the websites you visit can't track you the same way.
Now read that back. Your traffic goes through our servers. A VPN doesn't remove the party that can see your activity — it replaces it. You're not eliminating surveillance; you're choosing your surveiller. Which makes one question matter more than any feature on the pricing page: why would a company pay for servers, bandwidth, and engineers to route your traffic for free?
How free VPNs actually get paid
- Selling browsing data. The most direct model: the thing you installed to stop tracking becomes the single best tracking position on your device. Security researchers and regulators have repeatedly caught free VPN apps logging and monetizing user activity despite "no-logs" claims.
- Injected ads and trackers. Some free VPN apps ship with their own ad SDKs — meaning the privacy app is itself an ad platform.
- Selling your bandwidth. Some free VPNs quietly turn your device into an exit node or proxy that paying customers route traffic through. Strangers' traffic, your IP address.
- Upsell funnels. The honest version: a limited free tier that exists to sell the paid plan. Annoying, but legitimate — the business model is visible.
What you actually paid
With most truly-free VPNs, you handed your complete browsing activity — every domain, every session, tied to your device — to a company whose only revenue path runs through that data. It's the maximum-irony entry in this entire catalog: a privacy product priced in privacy.
To be fair
A few reputable paid VPN companies offer genuinely limited free tiers as marketing for their paid product, and say so plainly. The difference is a visible business model: you can point at who pays (the paid subscribers) and why the free tier exists (to convert you). No visible business model is the red flag.
How to defend yourself
The checklist
- Ask the one question: how does this VPN make money? If the answer isn't obvious in 30 seconds, the answer is you.
- Prefer paid, audited providers. Independent no-logs audits and a public ownership trail matter more than any marketing claim.
- Check who owns it. Many "different" free VPN apps are shells owned by the same data companies. Ownership is often harder to find than it should be — that's information too.
- Don't stack risk. Never log into banking or sensitive accounts through a VPN you wouldn't trust with that session — because you are trusting it with that session.
- Consider whether you need one at all. HTTPS already encrypts most traffic to most sites. A sketchy VPN is worse than no VPN.