For a privacy protecting VPN where you can't trust governments: There is really no policy-only way to trust a provider of a security-specific service where turn

For a privacy protecting VPN where you can't trust governments: There is really no policy-only way to trust a provider of a security-specific service where turning on logging is just flipping a single bit. There has to be some kind of technical measure to protect users, and no one has built that (yet). It also will take a pretty clear Chinese wall between builders and operators of a service, or even an arms length multi entity relationship (eg a meta VPN provider sells sells fairly turnkey VPN nodes to operators, who then run them; maybe a third entity which does billing for end users and rev shares everything out). Much more like Tor than the commercial VPN services of today. The corporate VPN world is different, and the simple "torrent shit on comcast" or "watch Netflix on vacation" market is way easier. IFF lavabit is resolved successfully, you may be able to trust a US provider for general privacy stuff, but that is months or years off.