You Do Not Need A VPN To Stop Giving Your Data Away

November 16, 2025 seanhackacademy

If you have looked at an app store lately, you would think the only thing standing between you and disaster is a VPN. Since the Online Safety Act kicked in and age checks started popping up on all sorts of sites, virtual private networks have rocketed up the charts. People are installing them less for privacy, more to avoid handing over ID.

It is understandable. We are being asked to prove who we are in more places, more often. A VPN feels like a magic cloak. The reality is less glamorous. A VPN can be useful in some situations, but it is not a cure all. And crucially, it is not the only way to reclaim a bit of control over your digital life.

If you are serious about privacy, you need a toolkit, not a single app. Here is where to start.

Incognito is not the invisibility mode you think it is

Private or incognito windows are often the first thing people reach for when they feel exposed online. The name is flattering. The function is limited.

Private browsing mostly cleans up after you on the local machine. It stops your browser from saving history, cookies and form autofill data. Handy if you share a laptop and do not want someone seeing the present you just bought them.

What it does not do is hide you from the outside world. Websites, advertisers and your internet provider can still see your IP address. They can still track that you visited, even if your own browser politely forgets. It is a curtain over your screen, not a force field around your connection.

By all means use it on shared devices. Just do not confuse it with actual anonymity.

Stop feeding the biggest data machines

A huge chunk of our online life flows through companies whose business model depends on knowing us very, very well. Traditional search engines and ad funded email services do not exist out of pure goodwill. They are trading on your habits, preferences and contacts.

That does not mean you must abandon them completely, but it is worth remembering you have alternatives.

Privacy focused search engines such as DuckDuckGo have matured into genuine replacements for everyday use. They emphasise not storing your search history and not building an advertising profile around you. The same company also offers its own browser, which strips away a lot of the quiet tracking that more mainstream options allow.

On the email side, end to end encrypted providers like Proton Mail change the equation. Messages are encrypted by default, and the service is designed to minimise the amount of information it can see about you. Storage is more limited on the free tier than the big players, but for many people it is enough, and there are paid plans for heavier use.

None of this is all or nothing. You can keep a Gmail address for low stakes sign ups and newsletters, and use a private account for banking, legal matters and anything else you would rather not feed into an advertising engine.

Pay without spraying your card details everywhere

If anything still makes people nervous online, it is paying. Unfortunately paying is now how we access almost everything, from streaming to council rates.

There are ways to lower the risk. Intermediary services such as PayPal sit between your card and the merchant, so you do not have to type card numbers into every random checkout that appears in your browser. Even if one store is compromised, the attackers do not immediately get your full card details.

Many banks also offer virtual cards that can be generated in their apps. These are essentially disposable numbers that can be used for a single purchase or for a specific retailer. They make it much harder for stolen card details to be reused across multiple sites.

Neither option makes fraud impossible, but they shrink the blast radius if something does go wrong.

Apple vs Android is not a simple privacy fight

Ask any group of tech people whether Apple or Android is “safer” and you will get something that sounds suspiciously like a football argument.

Apple leans heavily into the idea of a closed, controlled ecosystem. Apps go through stricter review, data collection prompts are more visible, and the company talks a lot about privacy. For many users and some experts, that tighter grip does translate into a feeling of safety, even if it also means you must accept Apple as gatekeeper.

On the Android side, there is more variety, more openness and, frankly, more opportunity for both good and bad actors. Google and many Android device makers are just as hungry for user data as Apple. Both camps invest heavily in tracking and analytics, they simply package it differently.

The practical takeaway is this. Pick the platform you are comfortable with, then put the effort into locking it down. Check app permissions regularly, do not install random software from unknown stores, and use the built in security features such as app tracking controls, regular updates and strong device passcodes.

Social media is where privacy really dies

We could spend all day tuning browsers and swapping email providers, then throw it all away by posting our lives, thoughts and networks on public social platforms.

Social media is the most brazen example of the “if it is free, you are the product” dynamic. The entire point is to gather as much behavioural data as possible, then package and sell attention to advertisers and other buyers. That is not a side effect. That is the business.

There is no trick setting that makes this safe. Private accounts help a bit. Turning off ad personalisation helps a bit. But as long as you are on the platform, using it, scrolling and liking, it is learning about you.

The only truly private social media strategy is not to be there, or to be there in a very limited, conscious way. That might sound extreme, but if you are serious about not being profiled, it is the one move that actually works.

The boring, unglamorous truth

The uncomfortable answer in all of this is that the best protection is not one magical app but a series of small, slightly annoying habits.

Use strong, unique passwords where passkeys are not available, backed by a reputable password manager.
Turn on multi factor authentication.
Swap default search and browser tools for privacy conscious ones where you can.
Use payment intermediaries or virtual cards instead of handing over your main card number every time.
Treat your phone as a sensitive device. Keep it updated, protected and uncluttered.
Be ruthless about which social platforms deserve your time and data.

VPNs can still be useful, especially on untrusted networks or in countries with heavy censorship. But they are not a magic cloak. The bigger gains come from changing who you share data with in the first place, and accepting that “convenient and free” usually has a hidden price tag attached to your identity.

Photo Credit: DepositPhotos.com