I'm actually going to work on the NordVPN project in a month or so.
As far as I know and from what I've seen I can tell you that its a legit company with legit products and is only aiming to do good. It was started by two friends, without any investors and to this day it still is absolutely independent and run by the same two guys