Post

Exposing VPN Risks: Popular iOS VPNs Linked to Chinese Companies and Military

Posted
By Tom Grant
3 min read
Exposing VPN Risks: Popular iOS VPNs Linked to Chinese Companies and Military

TL;DR

A significant portion of popular iOS VPNs are reportedly owned by Chinese companies, with some having ties to the Chinese military. This raises concerns about privacy and national security, as highlighted by a recent report from the Tech Transparency Project. Users are advised to be cautious when selecting VPN providers and to consider factors such as jurisdiction, security features, and privacy policies.

A recent investigation has revealed that up to one in five of the most popular mobile VPNs for iOS are owned by Chinese companies, some of which have ties to the Chinese military. This discovery raises serious concerns about privacy and national security, as VPNs are widely used to bypass censorship and enhance online privacy.

VPNs and Their Role in Online Privacy

Mobile VPNs are applications that connect smartphones to the internet through various servers worldwide. Users rely on VPNs to mask their online locations, access region-restricted content, and protect their privacy. However, the efficacy of a VPN depends heavily on the trustworthiness of the company operating the servers, as they have access to all the user’s internet traffic.

The Tech Transparency Project (TTP) conducted a study on the top 100 mobile VPN apps available on Apple’s App Store. Their findings, documented by mobile intelligence company AppMagic, uncovered that a substantial number of these VPNs are owned by Chinese companies. Notably, one of these companies, Qihoo 360, is classified as a Chinese military company by the US Department of Defense1.

Qihoo 360 and Its Subsidiaries

Qihoo 360, also known as 360 Security Technology, acquired an app development company called Guangzhou Quanyong. This company developed several mobile apps for Innovative Connecting Pte. Ltd., a Singapore-registered entity owned by Lemon Seed, a Cayman Islands-registered company. Innovative Connecting is behind popular VPNs like Turbo VPN, VPN Proxy Master, and Thunder VPN, among others.

In June 2025, the US government placed Qihoo 360 on its Entity List, citing national security risks2. Despite selling a package of assets under ‘Project L’, TTP suggests ongoing links between Qihoo 360 and Lemon Seed, based on public filings and shared personnel3.

Shell Companies and Proxy Ownership

The TTP report also highlights the use of shell companies and proxy ownership to obscure the true origins of these VPNs. Several VPN apps were traced back to companies in Hong Kong, which is under increasing Chinese control. Examples include X-VPN, VPNIFY, and VPN Bucks.

Additionally, some VPNs registered in other countries, such as WireVPN in the UK, are controlled by Chinese nationals through shell companies. These VPNs often share privacy policies with language directly lifted from Chinese regulations, further indicating their origins.

Choosing a Trustworthy VPN

Given these revelations, it is crucial for users to exercise caution when selecting a VPN provider. Here are some key factors to consider:

Jurisdiction

  • Avoid VPNs based in countries with strict intelligence-sharing laws: The location of the VPN provider can significantly impact your privacy. Be wary of VPNs based in countries that require data sharing with their governments.

Security Features

  • Strong encryption protocols: Ensure the VPN uses robust encryption methods like 256-bit ChaCha20.
  • Kill switch: This feature disconnects your internet if the VPN drops, preventing data leaks.
  • Secure protocols: Look for VPNs that support secure protocols like WireGuard.

Privacy Policy

  • No-log policy: The VPN provider should not track, store, or share your browsing history, IP address, or any network data.
  • Read the fine print: Carefully review the privacy policy to understand what data is collected and how it is used.

Conclusion

While VPNs offer a valuable means of enhancing online privacy, the TTP report underscores the importance of thorough due diligence. Users must be vigilant in choosing a VPN provider that prioritizes security and transparency. By considering factors such as jurisdiction, security features, and privacy policies, users can make more informed decisions to protect their online activities.

For further insights, check:

References

  1. Tech Transparency Project (2025). “Apple offers apps with ties to Chinese military”. Tech Transparency Project. Retrieved 2025-04-03. ↩︎

  2. US Department of Defense (2022). “1260H COMPANIES.PDF”. US Department of Defense. Retrieved 2025-04-03. ↩︎

  3. Tech Transparency Project (2025). “Apple offers apps with ties to Chinese military”. Tech Transparency Project. Retrieved 2025-04-03. ↩︎

Cybersecurity & Data Protection, Vulnerabilities
cybersecurity threat-intelligence privacy
This post is licensed under CC BY 4.0 by the author.