An unaudited no-logs claim is a marketing statement
Every provider says it keeps no logs. The ones worth trusting have paid an independent firm to verify it and published the report. Check three things: who conducted the audit, how recently, and whether it examined infrastructure or only policy documents. Providers with repeated annual audits — and, better, real-world court cases where no data existed to hand over — have evidence rather than assertions.
Jurisdiction matters more than most buyers realise
Where a company is incorporated determines who can compel it to log. Providers in Switzerland and Panama sit outside intelligence-sharing arrangements that cover the US and UK. This matters enormously to journalists and activists and rather less to someone using public Wi-Fi in a café — be honest about which you are before paying a premium for it.
Renewal pricing is the real price
Two-year deals at $2–3 a month are genuine, and they renew at $8–13. That is normal in this category rather than deceptive, but it makes first-term comparisons useless. Compare year-two prices, and note the one provider here that charges a flat monthly rate with no introductory discount at all.
Free VPNs are usually the product
Running a VPN network costs money, and a free service that is not funded by a paid tier is funded some other way — typically by logging and selling data, which defeats the entire purpose. The exception is a free tier subsidised by a paid product, which is why Proton's free offering is trustworthy and most others are not.