The offer may monetize your IP address

IC3 identifies hidden proxy participation in some VPN terms, app SDK arrangements and bandwidth-income pitches. Traffic routed through a household's connection may appear to originate from that household.

A VPN still needs a trustworthy operator

FTC's VPN guidance emphasizes understanding who operates an app and how it handles data. Encryption does not remove the need to inspect the provider's business model and permissions.

Sources[2] FTC

Read the sharing clauses before installing

Our checklist: look for proxy, relay, peer-network and bandwidth-sharing permissions; check how to opt out and identify the operator. If unexpected network activity suggests compromise, investigate the device rather than assuming uninstalling one app resolves everything.