VPN providers don’t protect your privacy online. Here’s what can.