content: I use them.  They've been pretty good so far. Not keeping logs helps.  However, to my knowledge, they've resisted publishing a warrant canary.  To me, that's troubling.  Why, you ask?  Here's my Devil's Advocate argument.  Please feel free to critique it. Say the government wants to conduct on-going surveillance on your activities through PIA's VPN service.  They go to PIA, grab their stuff, and issue a warrant to them saying that they can't tell their customer a base a thing.  Sure, there are no logs for PAST activities.  So they grab the private encryption keys and START logging things.  Bang.  Gotcha. A warrant canary would help mitigate this scenario.  It's relatively easy to implement.  Yet they resist doing so.  Why? The only official response is that warrant canaries "haven't been tested in court yet" back in 2013.  They also haven't published a transparency report (to my knowledge).