Technologies

Here’s What You Need to Know About VPN Trackers

Beware of VPN companies that put profits ahead of ethics. Here’s what to know about VPN trackers and how to protect your privacy.

Public concern over web tracking is at an all-time high. Even though the concern over tracking has been mounting for well over a decade, the situation hasn’t improved much over that time: Pervasive tracking and rampant data collection are still the lay of the land all these years later. Websites and apps deploy trackers that follow you around the internet and share the information they collect with various third parties. Internet service providers collect gobs of personal data every time you go online, then share it with others who monetize it, often without your knowledge or consent.

Because of this, people are increasingly turning to virtual private networks to help protect against invasive online tracking practices. But what can you do when it’s the VPNs themselves that are doing the tracking? As with any app or online service, it’s important to do your research and make sure you choose a provider that actually takes your privacy seriously. Just because a VPN company claims that your privacy is its top priority doesn’t mean it’s true.

VPNs are supposed to help you protect your online privacy and fight back against the machine hell-bent on exploiting your data for its own gain. Gaining privacy from tracking is among the main reasons you should seek the help of a VPN, but it can be difficult to sort through the various ways VPNs might track you. Here’s what to know about the different trackers VPNs use, and how they separate the best VPNs from the ones you should avoid.

First-party trackers vs. third-party trackers

Not all trackers are the same. For example, there’s a crucial difference between first-party and third-party trackers. There’s a similarly vital distinction between trackers used on a VPN’s website versus the ones inside a VPN’s app. In both cases, the second option will have much greater implications on your privacy than the former.

First-party trackers, also known as cookies, are used and stored by the websites you visit. They’re used for things like remembering your preferences, geographic region, language settings and what you put in your shopping cart. They’re also used by website administrators to collect data as you visit their sites, helping them better understand your behavior and figure out what will keep you on their site longer and buying more of their products and services.

Basically, first-party trackers are there to provide you with a smoother experience as you visit the websites you frequent. It would be annoying to have to set all your preferences each and every time you visit a site and to have to re-add each individual item to your shopping cart every time you click away from your cart.

A VPN company may use first-party trackers on its website to save your settings, display account-specific information after you log in and see what marketing channel brought you to its site.

Third-party trackers are different in that they are created by entities other than the site you’re visiting. After a site puts these trackers on your computer via your browser, they follow you across the websites you visit. They are injected into a website using a tag or a script and are accessible on any site that loads the third-party’s tracking code. But the big difference is that they’re used to track your online behavior and make money from you, rather than improve your online experience.

In simpler terms, third-party trackers exist to help companies bombard you with targeted advertisements based on your online browsing activity. Targeted advertising is big business, and there are mountains of cash to be made at the expense of your digital privacy.

That said, Apple and Google have begun shifting their policies regarding the use of third-party trackers in their respective mobile app marketplaces and have provided users more transparency and a much greater element of control when it comes to restricting how apps are able to track them. Google even proposed a solution to eliminating the use of third-party trackers altogether. That proposal, however, turned out to be a failure after people began pointing out the ways in which Google’s proposed alternative would make it even easier for the company to track and identify you for targeted advertising. Google was forced back to the drawing board and ended up shelving the idea for at least two years. Still, the industry is slowly showing signs of progress.

If a VPN company is using third-party trackers on its website for marketing purposes or to enhance your experience on the site itself, the tracking is easy to block in most cases. But when a VPN tracks you on its app, the alarm bells should start going off. In-app trackers should make you seriously concerned about what that VPN is really up to (Spoiler: It’s to make money from sharing your data) and should ultimately steer you away from that VPN altogether.

Why would VPN companies need to track you through their apps?

Simple answer: They don’t. Their apps would function just as well for you whether they tracked you or not.

But many VPN companies will employ trackers in their apps regardless of how much they say they care about your privacy. Those VPNs put users’ privacy at risk so they can make as much money as possible. And what some of these VPN apps track and share with third parties is actually quite alarming. This is the biggest reason we advise you to avoid using most free VPNs.

Read more: Best Budget Laptop 2023

What data is being collected by these trackers and who is it shared with?

The scope of data collection will vary greatly from one VPN to another, and will differ in terms of whether the trackers are being deployed on the VPN’s website or within the app itself. But let’s focus on trackers embedded within VPN apps themselves.

There are VPN apps out there that will track and share things like your user ID, device or advertising ID, usage data and even your location. They track this information just to sell it on to third parties for targeted advertising purposes, making money at the expense of your digital privacy. Any VPN engaging in such activity should be avoided at all costs.

When we say your data is being shared with third-party entities, we mean entities like data brokers and advertisers that put profits ahead of ethics. That information is also being shared with sites like Google and Facebook, meaning that even if you don’t have a Facebook account and you’re doing your best to stay away from big tech data hogs, your data is still being shared with them.

Unfortunately, far too many VPN apps will track and share your data with all kinds of third parties. That’s why it’s crucial to scrutinize the data sharing practices of any VPN you’re considering. (We do this as part of our review process and thoroughly vet a VPN’s data policies before we recommend it to anyone.)

The concern is real

VPNs are often quick to claim that the data they’re tracking and sharing with third parties is anonymized and not identifiable or tied to your personal information. That sounds great, but something like a device ID can still be used to identify you personally when other data points tied to your online behavior and interactions with the app are matched to that ID. It doesn’t actually take that much to connect the dots and identify you online.

Researchers have shown that 99.98% of users could be re-identified in any anonymized dataset using only 15 data points. The more data points an app is collecting about you, the easier it is for others to identify you online, even if the data being collected isn’t necessarily personally identifiable information.

cybersecurity-hacking-11 — It doesn’t take much to identify you online.

Graphic by Pixabay/Illustration by CNET

Find out what data they’re collecting and tracking

Luckily, it’s becoming easier and easier to see what VPN companies are collecting and tracking when you use their apps. For one, reputable VPNs are getting increasingly transparent about what data they collect and what kinds of trackers they may or may not be implementing on their sites and apps. VPNs know that their reputations rely on actually walking the walk when it comes to protecting user privacy. So transparency is key.

On top of that, with Apple’s App Tracking Transparency functionality in its App Store, you have a clear picture of an application’s tracking practices. You can see if any app you’re looking to download wants to track you and share your data with third parties and you can easily deny those permissions. Google has offered similar functionality since its Android 12 release.

In addition to scrutinizing a VPN app’s tracking practices, you’ll want to scour its privacy policy to see what kinds of trackers it uses, what data it collects and who it shares that data with. If you notice that a provider you’re looking at is sharing user data with an abundance of third parties, or if the provider isn’t upfront or totally transparent about its practices, then it’s best to move along and find something else.

When you do your research, you’ll see that the best VPNs don’t resort to such unscrupulous tracking practices. Part of our review process includes vetting the data collection practices of each provider. Though the VPNs we recommend, like Surfshark, NordVPN and ExpressVPN, may collect certain types of connection data when you use their apps, they don’t deploy in-app trackers.

While these VPNs may deploy cookies on their websites, they’re transparent about exactly what those cookies are there for and how they help improve website functionality and aid in advertising their services across the web. Their third-party trackers can also be blocked via your browser settings.

Always check a VPN’s privacy policies, and their apps in the App Store and the Play Store to learn more about the trackers they deploy on their websites and apps. The important thing to keep in mind here is that the apps of our recommended VPNs will not track you like the apps of some other less-than-trustworthy VPNs.

Read more: Best Phone to Buy for 2023

How to fight back against tracking

If you don’t want your VPN app to track you, you’ll want to take a few precautions.

With Apple’s App Tracking Transparency in place, iOS apps have to get your explicit permission before they are able to track you. If you deny that permission, the app developer won’t have access to your device’s advertising ID and won’t be able to track you or share that ID with third parties.

You can even deny any and all apps on your iOS device from even asking you if they can track you in the first place. All you’d need to do is head over to your settings menu and disable tracking. Similarly, if you’re an Android user, you can manage your app permissions to limit tracking on an app-by-app basis by navigating to your Privacy Dashboard.

Read more: Best Android Phone of 2023

Keep in mind that even if you deny an app access to your advertising ID, that doesn’t necessarily prevent it from sharing other data with third parties. A bit of investigative research from Top10VPN in 2021 showed that 85% of the top free VPNs in Apple’s US App Store may still share your data with third-party advertisers even after you’ve explicitly denied their requests to track you. Even if they don’t have access to your advertising ID — according to Top10VPN’s research — these free VPN apps still track and share information like your IP address, device name, language, device model and iOS version with advertisers without your consent. This is all information that can be used to identify you, and the research is a pointed reminder of why we recommend staying away from most free VPNs.

If you’re concerned about VPN companies using trackers on their websites and sharing data with third parties, then you can use a privacy-focused browser like Brave or Firefox, or use a tool like the Duck Duck Go’s browser extension to your current browser. Options like these will help you to easily prevent websites from tracking you as you browse the web. If you’re not willing to part ways with your existing browser or install an extension, there are various settings you should change to protect your privacy and limit tracking.

Read more: Best Laptop 2023

iphone-11-pro-max-5 — Free VPN apps on iOS devices may still be tracking you even after you deny them permission to do so.

Óscar Gutiérrez/CNET

Next steps

Websites and apps will routinely do whatever they can to track your activity across the internet to churn as much money out of the targeted ad machine as possible. But the tide is finally turning as people have begun to realize exactly how invasive the practice is and how detrimental it can be to our digital privacy.

More and more options are available to defend against tracking practices, and VPN companies are becoming increasingly transparent with consumers with regards to how they approach the subject and many are ditching tracking altogether. Unfortunately, many VPN companies still continue the practice and are sharing all kinds of tracking data with third parties. If you’re an iOS user, just take a look through the VPNs available in the App Store and take a peek at their «nutrition label» and you’ll see what we mean.

If you already have a VPN app installed on your device, check to see if it’s tracking you and sharing your data with third parties. If it is, it’s time to wipe it from your device for good and never look back, because it’s compromising your privacy rather than protecting it — which is the opposite of what a VPN should be doing.

Technologies

Apple CarPlay Ultra vs. Google Built-In: How the Next-Gen Auto Software Rivals Compare

Apple and Google are supercharging their car software experiences. Here’s how they differ.

I’d spent an hour driving a $250,000-plus Aston Martin up the Los Angeles coast when my hunger pangs became impossible to ignore, and as I’ve done many times before, I asked Siri (through Apple CarPlay) to find me a taco place. But then I did something no other car on the planet allows: I asked Siri to blast the AC and make the air colder. That’s because the 2025 Aston Martin DBX I drove was the first vehicle to come with Apple CarPlay Ultra, the upgraded version of the company’s car software.

Apple debuted CarPlay Ultra at WWDC 2025 last month, and this year’s version of the Aston Martin DBX is the first vehicle to launch with it (pairing with an iPhone running iOS 18.5 or later). As I drove the luxury crossover around, I fiddled with other features that aren’t available in regular CarPlay, from climate control to radio to checking the pressure on the car’s tires. Ultimately, Ultra gives deeper access to more car systems, which is a good thing.

That reminded me a lot of a new feature announced at Google I/O back in May: Google Built-In, which similarly lets users control more of a car’s systems straight from the software interface (in that case, Android Auto). When I got a demonstration of Google Built-In, sitting in a new Volvo EX90 electric SUV, I saw what this new integration of Google software offered: climate controls, Gemini AI assistance and even warnings about car maintenance issues.

But the name is telling: Google Built-In requires automakers to incorporate Android deeper into their cars’ inner workings. Comparatively, Apple CarPlay Ultra support seems like it won’t require car manufacturers to do nearly as much work to prepare their vehicles, just adding a reasonably advanced multicore processor onboard that can handle an increased task load. (Aston Martin will be able to add CarPlay Ultra support to its 2023 and 2024 lineups through firmware updates because they already contain sufficiently advanced CPUs.)

Both solutions reflect Apple’s and Google’s different approaches to their next versions of car software. Apple’s is lighter weight, seemingly requiring less commitment from the automaker to integrate CarPlay Ultra into their vehicles (so long as it has adequate processing power onboard), which will run through a paired iPhone. Google Built-In does require much more integration, but it’s so self-sufficient that you can leave your Android phone at home and still get much of its functionality (aside from getting and sending messages and calls).

Driving with Apple CarPlay Ultra: Controlling climate, radio and more

As I drove around Los Angeles in the Aston Martin with Apple CarPlay Ultra, I could tell what new features I would be missing once I stepped back into my far more humble daily driver.

At long last, I could summon Siri and ask it to play a specific song (or just a band) and have it pulled up on Spotify. Since Apple’s assistant now has access to climate controls, I asked to turn up the AC, and it went full blast. I asked to find tacos and it suggested several fast food restaurants — well, it’s not perfect, but at least it’s listening.

To my relief, Aston Martin retained the physical knobs by the gearshift to control fan speed, temperature, stereo volume and the car’s myriad roadway options (like driving assistance) in case the driver likes traditional controls, but almost all of them could also be altered in the interface. Now, things like radio controls (AM/FM and satellite) and car settings are nestled in their own recognizable apps in CarPlay’s interface.

Ultimately, that’ll be one of CarPlay Ultra’s greatest advantages: If you enter an unfamiliar vehicle (like a rental), you still know exactly where everything is. No wrestling with a carmaker’s proprietary software or trying to figure out where some setting or other is located. It’s not a complete replacement — in the Aston Martin’s case, there were still a handful of settings (like for ambient light projected when the doors open) that the luxury automaker controlled, but they were weaved into CarPlay so you could pop open those windows and go back to Apple’s interface without visibly changing apps.

The dependable ubiquity of Apple’s CarPlay software will likely become even more essential as cars swap out their analog instrument clusters for screens, as Aston Martin did. There’s still a touch of the high-end automaker’s signature style as the default screen behind the wheel shows two traditional dials (one for the speedometer, one for RPMs) with Aston Martin’s livery. But that can be swapped out for other styles, from other dials with customizable colors to a full-screen Maps option.

Each of the half-dozen or so dashboard options was swapped out via square touchpads smaller than a dime on the wheel next to the other touch controls. On the dual-dial display types, I swiped vertically to rotate between a central square (with Maps directions, current music or other app information) or swiped horizontally to switch to another dashboard option. No matter which one you choose, the bottom bar contains all the warning lights drivers will recognize from analog cars — even with digital displays, you’re not safe from the check engine light (which is a good thing).

Apple CarPlay Ultra doesn’t yet do everything I want. I wish I could also ask Siri to roll down the windows (as Google Built-In can — more on that later) and lock or unlock specific doors. If Apple is connected to the car enough to be able to read the pressure in each tire, I wish it could link up with the engine readout and be able to tell me in plain language what kind of maintenance issue has sprung up. Heck, I wish it could connect to the car remotely and blast the AC before I get in (or fire up the seat warmer), as some proprietary car apps can do. And while Apple Maps and Waze will be included at launch, Google Maps support is not, but it’s coming later.

These aren’t huge deficiencies, and they do show where CarPlay Ultra could better meet driver needs in future updates, notwithstanding the potentially dicey security concerns for using CarPlay Ultra for remote climate or unlocking capabilities. But it shows where the limits are today compared to Google’s more in-depth approach.

Google Built-In: Deeper car integrations — and, of course, Gemini AI

The day after Google I/O’s keynote was quieter back in May, as attendees flitted between focused sessions and demos of upcoming software. It was the ideal time to check out Google Built-In, which was appropriately shown off in a higher-end Volvo EX90 electric SUV (though not nearly as pricey as an Aston Martin).

As mentioned above, Google Built-In has deeper integrations with vehicles than what I saw in Apple CarPlay Ultra, allowing users to change the climate through its interface or access other systems, including through voice requests. For instance, it can go beyond AC control to switch on the defroster, and even raise and lower specific windows relative to the speaker’s position: cameras within the car (in the rearview mirror, if I remember right) meant that when my demonstrator asked to «roll down this window» pointing over his left shoulder, the correct window rolled down.

Google Built-In is also connected to Gemini, Google’s AI assistant, for what the company is calling «Google Live,» a separate and more capable version of the Android Auto assistant experience in cars right now. With a Live session, I could request music or directions much like I could with Siri — but my demo went further, as the demonstrator tasked Gemini with requests better suited for generative AI, such as asking, «Give me suggestions for a family outing» and telling it to send a specific text to a contact.

The demonstrator then asked Gemini for recipe advice — «I have chicken, rice and broccoli in the fridge, what can I make?» — as an example of a query someone might ask on the drive home.

Since you’re signed into your Google account, Gemini can consult anything connected to it, like emails and messages. It’s also trained on the user manuals from each car-maker, so if a warning light comes on, the driver can ask the voice assistant what it means — no more flipping through a dense manual trying to figure out what each alert means.

There are other benefits to Google Built-In, like not needing your phone for some features. But there are also drawbacks, like the need to keep car software updated, requiring more work on Google’s end to make sure cars are protected from issues or exploits. They can’t just fix it in the most current version of Android — they’ll need to backport that fix to older versions that vehicles might still be on.

This deeper integration with Google Built-In has a lot of the benefits of Apple CarPlay Ultra (a familiar interface, easier to access features), just cranked up to a greater degree. It surely benefits fans of hands-off controls, and interweaving Gemini naturally dovetails with Google’s investments, so it’s easy to see that functionality improving. But a greater reliance on Android within the car’s systems could be concerning as the vehicle ages: Will the software stop being supported? Will it slow down or be exposed to security exploits? A lot of questions remain regarding making cars open to phone software interfaces.

Technologies

A Samsung Tri-Fold Phone Could Be in Your Future, if This Leak Is to Be Believed

UI animations might have revealed the imminent release of a so-called «Galaxy G Fold» device with three screens.

Samsung has been showing off mobile display concepts with three screens at trade events such as CES for several years, but it might finally bring one to market soon if a leaked UI animation is any indicator.

As reported by Android Authority, an animated image from a software build of One UI 8 appears to show what some are dubbing a «Galaxy G Fold» device with three display panels. The screens would be capable of displaying different information or working in unison as one large display. The new phone model could debut as early as next week at Samsung’s Unpacked event on July 9 in Brooklyn.

Huawei released a tri-folding phone in February, the Mate XT Ultimate Design.

Some websites have gone into overdrive trying to uncover details on what Samsung’s new device might include and how much it may cost, with Phone Arena reporting that according to a Korean media report, it could be priced at about $3,000.

Samsung didn’t immediately respond to request for comment.