Researchers warn that those free VPNs you are using may be Chinese-owned and leaking your data to China.

The Tech Transparency Project (TTP) has issued repeated warnings about the continued presence of numerous free VPN apps with hidden ties to Chinese companies—including Turbo VPN and X-VPN—on both Apple’s App Store and Google’s Play Store. These apps, which promise to protect user privacy by encrypting internet traffic, are raising serious concerns about data security and U.S. national security.

Key Findings and Concerns

TTP’s research found that more than 20 of the top 100 free VPNs in the U.S. Apple App Store in 2024 had evidence of Chinese ownership. Many of these apps deliberately obscure their origins using shell companies, making it difficult for users to know their data is being managed by entities potentially subject to Chinese law. Under Chinese national security laws, companies can be compelled to hand over user data to the government. Because VPNs have access to all of a user’s web activity, this creates a significant risk that sensitive information could be exposed to Chinese authorities.

Apps like Turbo VPN and VPN Proxy Master, both linked to Qihoo 360 (a Chinese cybersecurity firm sanctioned by the U.S. over alleged ties to the People’s Liberation Army), remain available in app stores. X-VPN and others are also flagged as problematic. Despite previous reports and some removals (e.g., Thunder VPN, Snap VPN, Signal Secure VPN), many Chinese-owned VPNs remain available. TTP’s follow-up checks in early May 2025 confirmed that Turbo VPN and VPN Proxy Master, along with several others, were still accessible.

Both Apple and Google may be profiting from these apps through subscriptions and ad revenue, which adds a financial dimension to their continued availability despite privacy risks.

App NameStore AvailabilityChinese OwnershipNotable Risks
Turbo VPNApple, GoogleYes (Qihoo 360)Data access, national security
VPN Proxy MasterApple, GoogleYes (Qihoo 360)Data access, national security
X-VPNGoogleYesData access, national security
Snap VPNRemovedWas (Qihoo 360)Previously present, now gone

Recommendations

Experts and watchdog groups recommend that users avoid free VPNs and instead use paid services from reputable Western providers to minimize privacy and security risks.