Note that the NSA openly claims authority to actively snoop on (i.e. not just incidentally record, but deliberately examine) your communications in this case, as your connection appears to be a foreign one. The FBI also has a legal strategy around hacking anyone whose actual location is obscured and has some kind of nexus in the US (as they could be presumed to be "crossing state lines" and thus subject to Federal jurisdiction); I'm not sure exactly how the execution of that shook out so far, but I doubt the story is over in any case.

The VPN doesn't have to be outside the U.S., the tracking in question is only by your immediate ISP.

Some VPN providers "get it," and make a point to not keep logs (so if someone asks for them, they can in good conscience say: "sorry") - NordVPN comes to mind.

I've been shopping around for VPN routers and provider in light of this, and I expect others are too. I've used Tor in the past, but I expect for all of the devices in our house, that might get a bit cumbersome. I'd also like someone to hold accountable for QoS issues.

How necessary is the not keeping logs thing(unless of course they too sell the data)? Sure if someone is hunting you down and the VPN keeps logs, then they can easily figure it out. But if you're just trying to avoid your ISP selling your browsing data, do you need to be concerned about what the VPN provider knows? Would the ISPs go to the lengths of trying to get that info from the VPN?