Oct 7, 2025

Why am I still being tracked, even with a VPN on?

Articles

Why am I still being tracked, even with a VPN on?

Using a VPN puts you ahead of most people. You know your ISP is watching. You avoid public WiFi. You don’t hand your data to every free app that asks.

Still, it doesn’t make you invisible. If you’re serious about security, you need to understand where your real exposure is happening. 

Are you protecting your files, your metadata, your cloud accounts, and the digital footprint you leave behind across platforms?

What does a VPN actually do?

A VPN creates a secure, encrypted tunnel between your device and the internet. It hides your IP address and encrypts your data, so your Internet Service Provider (ISP) and others on the network. 

A proxy also hides your IP address, but it doesn't encrypt anything.

The key differences in how your data is routed and secured when using a regular connection, a proxy server, and a VPN. Source: Surfshark

Here's what a VPN does not do:

  • It does not stop apps from collecting your data.

  • It does not block trackers inside websites and apps.

  • It does not protect files, emails, or cloud backups.

  • It does not strip metadata from documents.

You're hidden from your ISP, but you're exposed to everyone else, especially the platforms and services you use every day..

The ugly truth about VPN apps

Many mobile VPNs are worse than nothing. A study of 283 Android VPN apps found:

  • 82% request access to sensitive data like messages and contacts.

  • 75% include third-party trackers.

  • 38% contain malware, despite high ratings and downloads.

  • 18% don’t use encryption at all.

And most users never realize it. 

What your ISP sees without a VPN

Without a VPN, your ISP sees nearly everything. Every site you visit, when, and how often. Even with HTTPS encryption, they see the destination.

And the Domain Name System (DNS)? Unless you’ve changed them, your ISP resolves them. They know exactly where you’re trying to go. Even with encrypted DNS, your ISP can still guess your destination based on IP data.

The internet was built for connectivity, not privacy. Without protection, your trail is wide open.

What websites see with a VPN

With a VPN, websites can't see your real IP address, but they can see the IP of your VPN server. They record it. If enough people use the same server, your activity can be mixed with theirs.

But if you log into your Facebook account through a VPN, Facebook still knows it's you. A VPN hides your location and IP trail, but it does not hide your identity once you log in.

Your browser is also a liability. If you haven't blocked cookies, disabled tracking scripts, or changed fingerprinting settings, websites can recognize your device, browser version, screen resolution, and even your battery level.

Forgotten accounts, forgotten data

Old accounts. Random apps. Cloud drives you tried once. The data doesn’t vanish when you stop using them. Drafts, PDFs, Gmail attachments, and backups are all still out there, all still vulnerable.

This isn't always malicious; it's just neglected. But even forgotten data still exists, and it still leaks.

VPNs hide traffic. They don’t erase the trail.

Metadata: the leak you don’t see

Metadata never stops leaking.

A photo carries GPS tags and timestamps. A document keeps usernames in its history. A PDF can embed trackers. Even deleted files linger in backups and sync logs.

Advertisers, data brokers, and governments thrive on metadata. 

This cartoon perfectly captures the feeling when you realize how much of your data is being collected, with someone, somewhere, hoping it'll become valuable. Source: Dataedo

Content can be encrypted, but metadata is usually not. It lasts longer than you want and says more than you think.

Can cloud storage providers read my files?

Yes. They can.

When you upload to Google Drive, iCloud, or Dropbox, your file is stored on someone else’s server. While it may be encrypted in transit and at rest, the platform holds the keys. 

This means your data is subject to their control, their business decisions, and their compliance with legal demands. All the convenient features like previews and search require this access, which makes your files vulnerable to human error, leaks, and breaches.

What actually protects me?

You don't have to stop using cloud services. You just need to stop using them blindly.

Real protection comes from control:

  • Over your files. 

  • Over your data trails. 

  • Over what gets stored. 

  • Over who can see it.

MyVault was built to give you control.

MyVault: Your smart, private assistant

We built MyVault to verify every request, every time. Nobody gets access just because they ask. Not even us.

You decide who sees what. Share with family, set up emergency access, or keep things locked down. MyVault works with the tools you already use, like Google Drive and Dropbox, but it puts you in charge.

Instead of scattered accounts and hidden leaks, you get one private map of your digital life - clear, connected, and only visible to you.

The future of data is control. Claim yours.

 A VPN hides your IP. MyVault protects everything else. Files, metadata, forgotten accounts, and the digital trail you leave behind.

True security isn’t passive. It’s active. It’s you deciding how your information is used, stored, and shared.

Don’t wait for a breach to remind you how exposed you are. Take control now. 

Join the MyVault Beta and own your digital life.