content: I've gone over this before, but what countries don't have a mandatory data retention law? At least at the moment? Oh, basically the US only. Now, if they have zero logs, and shared IP's, being based in the US isn't a concern as no one could subpoena data anyways. Now, if you're concerned about the VPN company being hacked in to by a 3 letter agency, do you think a 3 letter would care where the VPN is hosted if they're going to hack in anyways?