How Do Free VPNs Make Money? The Honest and the Dangerous Models

Free VPNs make money in one of two ways, and which one an app uses tells you almost everything about whether it is safe. The honest model is freemium: the free plan is a limited sample designed to sell you a paid subscription, so the provider earns money when free users upgrade. The dangerous model is that you are the product: the app monetises your data directly, through ads, embedded trackers, or by logging and selling your browsing activity. Running a global network of servers costs real money, so every free VPN is funded somehow — the only question is whether it is funded by future customers or by you.

The honest model: freemium funnels

In the freemium model, the free tier is marketing. The provider gives you a genuinely useful but deliberately limited service — a data cap, one device, fewer server locations — in the hope that when you hit those limits you will pay for the full plan. This is why the safe free VPNs cap something: Windscribe limits you to 10GB a month, Proton limits you to one device and a few countries, TunnelBear to 2GB. Those limits are not stinginess; they are the business model working as intended. The provider's incentive is to keep you happy enough to convert, which is the opposite of harvesting your data. Proton is explicit that its free plan is funded by paid subscriptions — that is why the free tier can afford to be private and ad-free.

The dangerous model: you are the product

When a free VPN has no paid plan to sell you, it has to make money from your presence — and the currency is your data. That can mean advertising SDKs that profile your device and usage, trackers embedded in the app, or, at the worst end, logging and selling records of the sites you visit. The research is blunt about how common this is: the 2016 CSIRO/Data61 study of 283 Android VPN apps found two-thirds embedded at least one third-party tracking library, and 38% contained malware or malvertising. A 2017 complaint to the US Federal Trade Commission by the Center for Democracy and Technology alleged undisclosed data sharing in the free Hotspot Shield app, which its then-parent denied (CDT; The Register, 2017). The tells for this model are the red flags we catalogue separately.

Why 'free forever, unlimited' is a warning

The phrase that should make you pause is 'completely free, unlimited data, forever' from a brand with no paid plan. Bandwidth and servers are among the biggest costs a VPN has, so unlimited data is the most expensive thing a provider can give away. Proton can offer unlimited free data because its paid customers cover the cost; an anonymous app with no paid tier cannot, so if it is offering unlimited data it is recouping the cost another way. This is why our ranking treats 'unlimited and free from a name you don't recognise' as a warning rather than a bargain — and why the safe unlimited option (Proton) and the risky one can look identical in a store listing until you check who is behind them.

How to tell which model an app uses

Three checks reveal the model quickly. First, is there a paid plan? A freemium provider always has one, prominently, because selling it is the point. Second, does the app show ads or ask for permissions unrelated to networking? Advertising and access to your contacts or location point to data monetisation. Third, what does the privacy policy say about sharing data with 'partners' or advertisers? A funnel-funded VPN has no reason to share your data and usually says so plainly; a data-funded one hides the sharing in vague language. Put simply: find the paid plan and you have probably found an honest free tier.

The safe way to use a free VPN

Stick to freemium free tiers from named providers, accept the limits as the price of the honest model, and upgrade to a paid plan only when you genuinely need more. That way you get real privacy for free, and if you ever pay it is for capability rather than to stop being harvested. Our ranking of the best free VPNs lists the tiers that use the honest model, and if you are weighing whether to pay at all, free vs paid VPNs lays out when the upgrade is worth it.

The hidden cost even a safe free VPN charges

Even the honest free tiers charge you something — just not in money or data. The currency is friction, and it is intentional. A safe free VPN wants you to feel its limits: to hit the data cap, notice the single-device restriction, wish for a faster server or a country that is not on the free list. That mild, recurring inconvenience is the conversion engine — the gentle nudge toward the paid plan that funds the whole operation. This is worth naming because it reframes how you should feel about a free tier's shortcomings: they are not signs of a bad product but of a working one, and they are the price you pay instead of your data. It also explains why a free VPN with no limits at all and no paid plan is suspicious — it has removed the very mechanism an honest free service uses to make money, which means it must be making money another way. When you understand the funnel, the limits stop being annoying and start being reassuring. There is a second, subtler cost worth flagging: attention. Some free tiers nudge you toward the paid plan with in-app prompts and upgrade reminders, which is fair enough as long as the app itself is quiet and ad-free between them. The line to watch is the one between a provider marketing its own paid plan to you — normal, and how the free tier stays funded — and an app selling your attention or data to third parties, which is the dangerous model. A few upgrade prompts are the honest cost of free; a stream of third-party ads is a warning.