Do Free VPNs Sell Your Data? How to Tell the Funded From the Predatory

"If you're not paying, you're the product" is half-true for VPNs. The free plans VPNUS lists are marketing costs for paid products. The dangerous ones are structured the other way around: the free app IS the business, and its inputs are your traffic, your bandwidth, or your attention.

Check 1: Who owns it?

A safe free VPN names its operating company, headquarters and jurisdiction — verifiable in company registries. If the developer account is a generic LLC with a Gmail address, stop there.

Check 2: How is the free tier funded?

Acceptable answers: upselling paid plans (Proton, Windscribe, hide.me), or clearly-labeled ads (Hotspot Shield). Unacceptable: no visible answer. Bandwidth-resale networks — where your device becomes an exit node others pay to use — have shipped inside 'free VPN' apps repeatedly.

Check 3: What does the privacy policy actually permit?

Search the policy for 'affiliates', 'partners', 'advertising' and 'usage data'. A policy that permits sharing browsing-derived data with advertising partners is a data business, whatever the app icon says.

Check 4: Is there an audit?

Independent no-logs audits (Proton VPN, TunnelBear's annual audits, hide.me) don't guarantee sainthood, but a company that pays auditors to check its claims is structurally different from one that avoids scrutiny.

Check 5: Permissions

A VPN app needs network permissions. It does not need your contacts, location, or accessibility services.

The bottom line

Every free plan in the VPNUS directory passes checks 1 and 2, and each profile states audit status and jurisdiction so you can apply 3–5 yourself.