Logging your activities and monetizing your data are the most common things free VPN providers can do. Your browsing habits may also become a target for third-party bidders. The leaking of this sensitive data can be a reason for unwanted ads that may continue to appear inside or outside the app, even if you are not using VPN.
Data collection and advertising
Traffic substitutions and manipulations
Outsourced infrastructure