How free VPNs make money
Servers and bandwidth cost money, so a free VPN is funded somehow. The models are advertising, selling data, selling your bandwidth to others, a free tier subsidised by paying customers, and running it as a loss-leading feature of another product. Only two of those are benign.
4 min read
Bandwidth is not free, servers are not free, and a VPN moves a great deal of both. Anyone offering the service at no charge is covering those costs from somewhere, and asking where is not cynicism — it is the single most useful question about any free privacy product.
Model one: advertising
Ads in the app, sometimes ads injected into pages.
In-app advertising is comparatively benign, though ad SDKs are themselves tracking software and their presence in a privacy product is awkward. Injected advertising is not benign at all: it requires the provider to modify traffic in transit, which is precisely the capability a VPN is supposed to remove from other parties.
Tell: ads in the interface, or ads appearing on sites that do not normally have them.
Model two: selling data
The provider records what you do and sells it, usually as aggregated "market intelligence" or browsing panel data.
This is the model that makes free VPNs notorious, and it is the exact inversion of what the product claims. It has been documented repeatedly, including by regulators, and the giveaway is generally in the privacy policy rather than hidden: a clause permitting sharing with "partners" for "analytics" or "business purposes" is doing the work.
Tell: a privacy policy that reserves the right to share data with third parties for anything other than operating the service.
Model three: selling your bandwidth
The app enrols your device as an exit node in a residential proxy network, and other people's traffic passes through your connection.
This is the most consequential model, because it does not merely expose your data: it makes your internet connection the origin of someone else's activity. That has produced real-world consequences for users, and it has been the subject of regulatory action.
Tell: a clause about "sharing resources", "peer-to-peer bandwidth" or being part of a "network of nodes". Also, an app that runs constantly and moves data when you are not using it.
Model four: a free tier funded by paying users
The provider sells subscriptions and offers a limited free plan as a route into them. Free users cost money and are treated as marketing spend.
This is a normal software business model and it is honest, provided the limits are stated. The constraint is usually bandwidth, speed, server choice or concurrent devices.
Tell: a visible paid plan, and clearly documented limits on the free one.
Model five: a loss leader for something else
A browser, a security suite or a hardware product includes a VPN because it helps sell the main product. The VPN is a cost centre and is expected to be one.
Also legitimate, with the caveat that the parent product's data practices are what actually matter.
Tell: the VPN is a feature of something else rather than a product with its own name.
How to work out which one you are using
- Read the privacy policy's sharing clause. Not the marketing page. The clause that says who else receives data.
- Look for a paid plan. If there is none and no parent product, models one to three are the remaining options.
- Watch the app's data use when idle. A client moving significant traffic while you are not using it is worth investigating.
- Check who publishes it. A named company with an address and a jurisdiction is a different proposition from an anonymous developer account.
Where VPNmine sits
Model four, stated plainly. Every server in every country is open to every user at no charge, there is no advertising in any client, and no user's device is ever an exit node for anyone else's traffic — every endpoint is hardware VPNmine rents and configures. Paid plans exist for people who want more, and they fund the rest. The privacy policy states what is recorded and the server list states where.
That is a claim like any other, and the right response to it is the same as to anyone else's: check the policy, look for the sharing clause, and see whether the specifics are there.
Is a free VPN safe
The question is unanswerable in general and easy in the specific. A free VPN funded by subscriptions is as safe as its operator. A free VPN funded by selling your bandwidth is worse than no VPN at all, because it adds a liability you did not have before. The model is the answer, and it is usually discoverable in about five minutes.
