There are multiple partnerships and ownerships in VPN and data mining industries that are not publicly admitted, unless something goes wrong[1][2].
Although the presence of these relationships alone is not always enough to claim that customers' privacy has been violated, it makes these companies look much less trustworthy in the long run.
[1] https://www.theverge.com/2015/5/29/8685251/hola-vpn-botnet-s...
[2] https://torrentfreak.com/images/Luminati-Networks-LTD-vs-UAB... [pdf]