A VPN is not a charity. Servers, bandwidth and apps cost real money every single month. Before you trust a free VPN with everything you do online, ask one question: who is paying for this - and what do they get?
Every free VPN runs on one of four money models, and the model decides whether the app protects you or farms you. Three of the four are survivable. The fourth - the one behind most unlimited free VPN apps with names you cannot trace to a real company - pays its bills by logging what you do and selling it, or by quietly renting out your connection. This page walks through all four models with the evidence you can check yourself, so you can classify any free VPN in about two minutes.
The healthy model. A real VPN company sells a paid plan, and a slice of that revenue funds a limited free tier whose real job is marketing: you try the service, and if the limits bite, you upgrade. Proton states this openly - its free VPN is funded by revenue from paid plans, which is also why the free plan can offer unlimited data with no ads and an audited no-logs policy. Windscribe's 10 GB free plan works the same way. The limits are the tell: data caps, one device, fewer countries. A provider using this model wants its limits visible, because the limits are what sell the upgrade.
Some free VPNs show ads in the app or inject sponsored results. This model is at least honest and visible: you can see exactly how you are paying. The problems are softer ones. Ads mean the app talks to advertising networks, which adds trackers to a tool you installed for privacy. Aggressive versions interrupt every connection with full-screen ads, and a few push notification spam after you close the app. Ad funding alone does not prove a VPN logs you - but combined with a vague privacy policy and an unknown publisher, it is a strong reason to walk away.
The dangerous model. The app records which sites you visit, when, and from where, bundles that behaviour, and sells it to data brokers and advertisers. This is not theory: free VPN apps have repeatedly been caught by researchers doing exactly this, including apps with millions of installs whose privacy policies granted themselves permission to log and share in the fine print. The business only works if the VPN logs - which is why a famous-name no-logs claim means nothing without an independent audit or open-source apps behind it. If a free VPN has no paid plan, no ads you can see, and no parent company you can name, ask what else it could possibly be selling.
The quietest model: the free app turns your phone or PC into an exit node, routing other people's traffic through your IP address, and sells that bandwidth to proxy networks. You may never notice - until a website bans your IP for abuse you did not commit, or your home connection is associated with someone else's activity. This model has appeared in real free VPN and free proxy apps, usually buried in terms nobody reads. Any permissions request or terms line about sharing, contributing or reselling bandwidth is a stop sign: uninstall and choose a provider whose model is model one.
Run this checklist before installing anything. One: can you name the company and find its real website and address? Two: does it sell a paid plan - the engine of model one? Three: does the privacy policy use the words log, share or partner about your activity data? Four: are the apps open source or independently audited? Five: are the free limits printed clearly on the provider's own plan page? Proton VPN Free and Windscribe Free pass all five checks, which is why this guide names them. An app that fails three or more is not a bargain; it is model three or four wearing a free sticker.
The free VPNs from this guide are shown and set up live in the video - watch it before you install anything.
▶️ Watch Full VideoBecause no logs is a marketing sentence, not evidence. What matters is verification: independent audits, open-source apps, and a real company whose paid business would be destroyed by a logging scandal. Providers like Proton publish audit results and open-source their apps precisely so the claim can be checked instead of believed.
Not always - ads and logging are separate choices. But ad funding means advertising networks are inside a privacy tool, and it often travels with weak policies. Treat heavy ads plus an unknown publisher plus no paid plan as a combined warning sign, even if each one alone is survivable.
Yes - some free apps include bandwidth-sharing terms that route third-party traffic through your IP address as an exit node. That can get your IP blocked by websites or linked to traffic that is not yours. Check the terms for bandwidth sharing language, and prefer providers whose model is subscriptions.