You should know who runs a VPN in my opinion if you're going to trust them. Private Internet Access you at least have a name at London Trust Media, but Andy Yen has a public presence.

I don't trust anyone who uses "military grade encryption", period, even though it is just a marketing ploy.

ProtonVPN has their own data center of some sort in Switzerland. All VPNs are leasing the same servers from Leaseweb and friends (even ProtonVPN). They say it's in an underground retired army bunker, which sounds good for physical security assuming that's really the case. You never know for sure, but it's better than the alternatives.

VPN companies are notoriously shady, and I only trust ProtonVPN. I believe their service in _some_ respects is a cut above the rest, and I am willing to deal with multi-day customer service responses, DDoS attacks, and the like because of that.