All one can really do is treat corporations adversarially and assume the worst. It's crazy that I need to run a VPN from my home since my own ISP would use deep packet inspection (aside from logging DNS entries) to profile my household for advertising purposes.
Recommendations: - Mullvad: they take cryptocurrency, account ID is a randomly generated number that can't be recovered, no logging, support Wireguard, reasonably fast, works well on mobile - Cloudflare WARP: centralized corp but they don't sell customer data and aren't incentivized to do so (disclaimer: for now), really damn fast since you're probably hitting Cloudflare sites from your ISP anyway, they use Wireguard (but in a custom setup), works really well on mobile