That free VPN you installed? It's probably selling your browsing data.
24 Jun 2026 · 3 min read · Comments
This article contains affiliate links. If you buy through them, we may earn a commission — at no extra cost to you.
You installed a free VPN to protect your privacy. It was free. That should have been the first question.
Running a VPN costs real money. Servers in dozens of countries, bandwidth, engineering, support — none of it is free. So when a VPN charges you nothing, the question isn't whether it has a business model. It's what the business model is.
For a significant number of free VPN apps, the answer is your traffic data. You install the app to keep your browsing private, and the app logs your browsing to sell to data brokers, advertisers, and analytics companies. You've replaced one surveillance problem with a worse one — because at least your ISP is regulated.
How the free VPN business model actually works
- The app is free to download and use. The company still needs revenue.
- Your traffic passes through their servers. They can see every site you visit, in plain text, before it's forwarded.
- That browsing history — timestamped, linked to a device identifier — is worth money to advertising networks and data brokers.
- Some apps go further: injecting ads into your browsing, harvesting contact lists, or selling bandwidth to other users of the network.
The phrase "aggregated or de-identified" is doing a lot of work in policies like this. Research has repeatedly shown that de-identified browsing data can be re-identified with a small number of additional data points. "Aggregated" still means they collected it first.
What an audited no-logs policy actually means
- A no-logs VPN is one that doesn't record what you do inside the connection. Your browsing doesn't touch a log file. If a government or court requests your data, there's nothing to hand over because it was never written down.
- The meaningful word is audited. An independent security firm has gone into the company's systems and verified the policy matches the technical reality. Anyone can write a no-logs policy. Not everyone can have it verified.
- NordVPN's no-logs policy has been independently audited multiple times. The audit reports are public.
The cost question
A reputable VPN costs around $3–5 a month on an annual plan. That's the price of one coffee. In exchange, you get an encrypted connection and a provider with a verifiable reason not to sell your data — because their revenue comes from you, not from your browsing history.
The free VPN wasn't free. You just paid in a currency you didn't know you were spending.
Frequently asked questions
Does a VPN make me anonymous online?+
No. A VPN encrypts your connection and hides your traffic from your ISP and other network observers, but websites can still identify you through cookies, browser fingerprinting, and account logins. A VPN protects your network layer — not your identity layer.
Are free VPNs safe to use?+
Many free VPNs fund themselves by logging and selling your browsing data to advertisers — the opposite of their stated purpose. Research from Privacy International has found multiple free VPN apps sharing user data with third parties.
When does a VPN actually help?+
A VPN meaningfully helps when using public Wi-Fi (coffee shops, airports, hotels), when your ISP sells browsing data, and when accessing region-locked content. It adds less value when you're on a trusted home or work network.
