Free VPNs Hide Data Risks: Chinese Apps Exposed

A recent investigation into mobile VPN apps has uncovered that many popular free and freemium services, downloaded millions of times in the US, may be compromising user privacy. Researchers found that a substantial portion of these apps route user data through servers operated by companies legally compelled to disclose information to foreign governments upon request. This finding is particularly concerning as it undermines the core purpose of using a VPN for enhanced online privacy and security.

The study analyzed over 7,000 mobile VPN apps globally, focusing on 390 actively downloaded in the United States via Apple and Google app stores. The research identified that 64 of these apps are linked to Chinese companies. Alarmingly, 31 of these apps obscure their ownership through shell companies registered in jurisdictions like Singapore, Hong Kong, and the UK, making it nearly impossible for US consumers to ascertain the true operator.

This ownership structure poses a significant risk, especially for individuals who rely on VPNs for sensitive activities. Journalists, activists, and dissidents often use VPNs to protect their identity and communications. A VPN that records user activity, due to mandatory data sharing laws in its home country, defeats the operational purpose of these privacy tools. Many of these apps also actively collect geolocation data and other user information, further exacerbating privacy concerns.

The article suggests practical steps for users to identify trustworthy VPNs. These include looking for VPNs that publicly disclose their operating company's identity, have had their no-logs policy independently audited, and are based in jurisdictions outside of major intelligence-sharing alliances like the Five Eyes. Free VPNs, in particular, warrant extra scrutiny due to business models that often rely on data resale or advertising, with many containing active trackers.

NordVPN is highlighted as an example of a service that passes these verification tests. It is headquartered in Panama, outside intelligence-sharing pacts, and has publicly disclosed ownership and undergone multiple independent audits of its no-logs policy. The service also offers additional privacy features like tracker blocking and dark web monitoring. A 27-month plan for NordVPN Basic is available at a discounted rate of $3.49 per month, with a 30-day money-back guarantee.