content: Most Euro VPN's are legally required to log your data, see data retention laws in Europe. The US doesn't have said laws. These US agencies could hack in to the VPN servers, but do you really think that a VPN being in Europe would stop a three letter agency from hacking in? That's naive. Even then, a US VPN with no logs getting hacked is only dangerous for new data, a Euro one the hackers get the old, logged by legal mandate, data* plus new data. So in this case, PIA being US based is actually a plus. Whether or not you trust their intrusion protection is what is a concern here. Edit: *added another "data"