A new Proton report released this week reveals that many popular VPN apps may be doing the opposite of what users expect. A virtual private network is designed to encrypt your internet activity and hide your IP address and physical location, keeping your identity secure. But the findings show serious cracks in that promise, with one in six VPNs actively tracking user location.
According to the research, 64 VPN apps downloaded in the United States are owned by Chinese companies and contain trackers that collect a wide range of user information. That data includes device IDs, network information, device models, and mobile carrier details. Among these apps, 25% were found to actively track a user’s location.
Millions of Users, Data Headed to China
In June alone, these apps were downloaded more than 13 million times. Digging deeper, Proton found that 31 of the Chinese-owned VPNs use shell companies registered in jurisdictions such as Singapore, Hong Kong, and the United Kingdom to further obscure their ownership.
The privacy implications are significant. An authoritarian government could use this data to track a person’s location. That poses a real risk for public officials, law enforcement personnel, journalists, or protest attendees who rely on a VPN for safety. China is not the only country involved. Companies in Israel, Russia, and the Five Eyes nations—Australia, Canada, New Zealand, the United Kingdom, and the United States—also collect tracking data from millions of people.
Weak Verification Leaves Users Exposed
Transparency is a central concern. Numerous problematic VPN apps remain readily available for download through Apple and Google. The report notes that both companies require developers to submit their own paperwork to verify their apps, with little verification and no independent audits performed by either platform. Apple and Google did not immediately respond to requests for comment.
This gap in the verification process makes it difficult to tell which virtual private network apps genuinely protect your privacy and which do the opposite. Experts stress the importance of knowing who is behind your VPN and what data it collects. Popularity in Apple’s or Google’s app marketplaces does not guarantee that an app is safe to use.
For those seeking a reliable option, VPNs such as Proton and ExpressVPN consistently rank near the top of independent recommendations, having gone through rigorous testing that includes a thorough examination of each app. The guidance for users is direct: avoid any VPN that is unclear about where it is based, who operates it, and how it protects user privacy. Instead, choose a trustworthy service that is transparent about all three.
