Proton says 85% of VPN apps downloaded in the U.S. contain trackers, with some collecting location data. Here’s what that means for your privacy and how to choose VPNs carefully.
Table of Contents
What Happened?
Proton — the privacy company behind Proton VPN — reviewed more than 7,000 mobile VPN apps worldwide. Its report was published on August 27, 2026.
A VPN, or virtual private network, routes your internet traffic through another server. People often use one to hide their IP address and improve online privacy.
However, Proton found that many VPN apps included tracking tools used for advertising, analytics, or profiling.
Because Proton also operates its own VPN service, this research comes from a company competing in the same market. Proton also promotes its service in the report.
Still, the findings raise an important question: do you know what the privacy app on your phone is collecting?
Privacy risks can also extend beyond one VPN app. Personal information may already be circulating online because of other breaches or leaks you never noticed.
That information can later help criminals create more convincing phishing emails, fake calls, or impersonation attempts.
If you are unsure whether your information was leaked somewhere online, automatic monitoring can help you spot problems earlier.
Futureproof monitors your data for leaks 24/7 and helps you reduce scam risks with simple, clear steps.
Who Could Be Affected and What Data Can VPN Apps Collect?
Proton did not provide an exact number of individual people whose information was collected.
Download numbers also do not equal unique users, so they cannot show exactly how many people were affected.
However, Proton reported that 85% of the VPN apps it studied in the U.S. contained trackers.
These trackers could collect information such as:
- your unique device ID
- your device model
- your network type
- your mobile carrier
- other information about your device or app use
Proton also found 64 VPN apps that collected physical location data using GPS or other location information.
Those apps included VPN Proxy Master, VPN-Fast VPN Super, and X-VPN.
Together, apps that tracked location represented about 20% of VPN downloads in Proton’s U.S. dataset.
Proton also identified 64 VPNs as Chinese-owned. It said 31 of them hid their ownership behind companies registered elsewhere.
For you, the bigger issue is transparency. A privacy service should make it clear who owns it and what happens to your information.
Futureproof scans your data for leaks and shows exactly how to close security gaps — before scammers find them first.
Check my safetyHow Some VPN Apps Can Track You
The Proton report does not describe a cyberattack or hackers breaking into these VPN apps.
Instead, the privacy concerns come from tracking software built into the apps themselves.
Proton used data from Exodus Privacy, an open-source service that looks for tracking code inside Android apps. The trackers can support analytics, advertising, or user profiling.
Some VPN companies also included tracking software from outside advertising or technology companies.
That matters because a VPN has an unusually sensitive position.
Your internet connection passes through the VPN service while you use it. So you are placing significant trust in the company running it.
Proton also found three VPN services owned by market research companies. These included Phone Guardian Safe WiFi, My Mobile Secure VPN, and Urban VPN.
Proton criticized Apple and Google for relying heavily on information submitted by app developers.
According to the report, the stores check privacy documentation but do not independently verify every VPN’s actual behavior.
At Futureproof, Kevin explains digital safety in simple words, with clear tips and zero fluff. He holds a degree in information technology and studies fraud trends to keep his tips up-to-date.
In his free time, Kevin plays with his cat, enjoys board-game nights, and hunts for New York’s best cinnamon rolls.
