VPNs are supposed to keep your data safe, but what data do they need to achieve this?