8M users' AI conversations sold for profit by 'privacy' extensions (thread incl. Urban VPN findings)
Thread documents Urban VPN/BiScience data-broker affiliation, GDPR concerns, Firefox addon removal, Chrome store survival.
The rare VPN where no investigation is needed - the privacy policy is the evidence. Urban VPN's parent self-declares as a data broker and sells behavior segments built on your browsing to advertising and analytics customers. It is free for the same reason surveillance is free. HN commenters have flagged the model as a straightforward GDPR violation; a related 2025 HN story documented 'privacy' browser extensions selling users' AI conversations. Install this on a burner profile at most.
by the vpncomparison editorial desk · review version 2 · prose updated 2026-09-28 · facts as of 2026-09-28 · how we verify
UrbanVPN is a free commercial service offering browser extensions and apps for basic web unblocking. It’s operated by Urban Cyber Security Inc., tied to Israeli data broker BiScience (B.I Science (2009) Ltd.). The core caveat: this isn’t a privacy tool - it’s a data collection platform. Its own policy confirms it sells browsing-derived behavior segments to advertisers, making it fundamentally incompatible with user privacy.
UrbanVPN makes no credible no-logs claim. Its privacy policy explicitly states it collects browsing data, GUIDs, device IDs, e-commerce activity, and Panelist ID data, which it shares and sells to clients via its parent company’s data brokerage. Evidence of logging comes directly from the operator’s disclosures - no audits, no warrant canary, and no court tests. Jurisdiction in Israel offers no strong privacy protections, and the business model relies on monetizing user data, confirmed by its own documentation and Hacker News investigations.
There is no paid tier - UrbanVPN is entirely free, funded by selling user data. You pay with your browsing history, not money. No subscription pricing, renewal fees, or contracts apply. Refund terms are irrelevant. Payment methods include no crypto options, and anonymity at signup is not addressed. The real cost is ongoing surveillance: every session feeds a data broker’s revenue stream under the guise of a “free” service.
UrbanVPN supports Chrome, Android, Windows, and macOS via apps and extensions. It lacks a kill switch, split tunneling, multihop, obfuscation, and Tor over VPN. Server count and country coverage are undisclosed. P2P is not supported, though streaming services may work. No open-source components are present. Performance claims are unverified, as no independent testing has been conducted. The feature set is minimal, prioritizing data harvesting over user functionality or security.
UrbanVPN is operated by Urban Cyber Security Inc., affiliated with BiScience (B.I Science (2009) Ltd.), a known data broker. Hacker News reports from 2025 confirm this link and describe GDPR violations due to non-consensual data sharing. The Firefox add-on was removed following community backlash, though the Chrome version remains. The company runs dozens of branded proxy tools with shared data practices. Data quality is reported, not independently verified, but operator disclosures and third-party analysis align on the data brokerage model.
UrbanVPN offers no obfuscation features, making it ineffective against deep packet inspection used in highly censored regions like China, Iran, or Russia. It is not designed for censorship circumvention. The lack of obfuscation, combined with a data-selling business model, means using it in repressive environments could increase risk. This tool should not be relied upon where access or user safety is critical.
Avoid UrbanVPN if you care about privacy - its business model is built on selling your browsing data. It’s not a trap disguised as privacy; it’s open about being a surveillance tool. The money trail leads to data brokers, not user protection. For real privacy, choose audited, independent providers with proven no-logs policies.
| Intro price | see provider site |
|---|
See the 3-year total next to the marketing number: true-cost calculator →
affiliate status not verified yet
If we sign up for this program, every link here becomes rel="nofollow sponsored" and this box stays. Until then our links are plain redirects with zero tracking. Ranking logic physically cannot read affiliate fields - here is the proof.
Before you pay: check the renewal price, the refund window, and whether a cheaper or free path covers your use case - the honest checklist.
Based on our checks as of 2026-09-28: UrbanVPN scores 5.1/10 in our weighted review. We logged 2 red flags (listed above). User reports, ownership and the incident record are documented with dated sources in the meta-review below.
A free proxy that routes traffic through undisclosed servers, allowing basic unblocking - while collecting and selling your browsing data, device IDs, and online behavior to advertisers via its parent data broker.
There’s no monetary cost - renewal pricing doesn’t apply. But the ongoing cost is your data: every session feeds a commercial data brokerage, making long-term use a continuous privacy loss.
The logging evidence is the company’s own privacy policy, which admits to collecting and selling browsing data, device IDs, and behavior segments. No audits or court tests exist - this is a self-declared data broker.
No. UrbanVPN lacks obfuscation and is not designed for censorship resistance. It won’t bypass firewalls using deep packet inspection and may expose users to greater risk due to data harvesting.
The service is free and doesn’t require payment, but anonymous signup isn’t confirmed. Regardless, your browsing data is collected and sold - true anonymity is impossible given its data brokerage model.
If it shuts down, data collection might pause, but previously sold data remains in third-party hands. There’s no user control or deletion guarantee - your history could persist indefinitely in ad and analytics databases.
For real privacy, avoid free data-harvesting proxies. Consider Mullvad or IVPN - flat-rate, audited, independent providers that don’t monetize user data. They cost a few dollars monthly but protect, rather than profit from, your traffic.
Structurally the most trustworthy free VPN: a Seattle activist collective running RiseupVPN as a donation-funded experiment - no account, no IP logging, open-so
1M+ (TTP: ranked #82-99 US App Store 2024) installs. Not independently audited in this dossier Included as second instance of the multi-brand farm pattern.
Nonprofit privacy institute; VPN is a member perk, not a product. (Specific VPN subpage 404'd at crawl 2026-09-27 - site restructured.)
No comments yet - be the first. Posting runs a short proof-of-work in your browser (anti-spam), no account needed.