Start with who you want privacy from
Your local network, internet provider, VPN service and destination website occupy different positions in a connection. Assess a VPN by separating those observers. Treating it as a single switch that hides every detail from everyone creates unrealistic expectations.
The local network and the website
Traffic inside the tunnel is encrypted between your device and the VPN server. The local network can still observe some information, such as a connection’s existence and traffic volume. The destination generally sees a VPN exit address, but it still knows the account you sign into and information you submit.
The provider and its policy
The VPN provider is part of the traffic path. What it processes depends on its architecture and implemented policies. An encrypted protocol alone does not prove that the provider keeps no records. Read HarmanVPN’s privacy policy for the separate treatment of account, operational and browsing data.
Information left on your device
A VPN does not automatically clear browser history, screenshots or downloaded files. Local session management is a separate concern when another person uses the device. Sign out of accounts on shared devices, review session settings and do not treat a VPN as a substitute for device security.