Personally I use Mullvad. They’re a Swedish company and I’m located in Sweden. They had their servers taken by the authorities, who in turn were unable to recover anything of use. That’s the best kind of audit you could get, and speaks volumes more than say, Apple self-proclaiming that their stuff is private with their source being “trust me bro.”

That said, I don’t think you should trust a random gay dude on the internet; my judgement is based on an event that happened here, I’ve no idea if their infrastructure looks the same everywhere. Look into how the companies operate, who they partner up with, who owns them, etc. and make that judgement for yourself.