so saying that, you will rather trust IPVanish - US based company than ExpressVPN - British Virgin Islands (BVI) company that is basically a british orverseas territory (even if they don't say that clearly - its under the jurisdiction and sovereignty of the United Kingdom)?
Regarding the British Virgin Islands, I'd have to look into their data retention laws. Given that various shady companies (like Bitfinex) are incorporated there, I bet their laws are fine and don't require logging. But research is in order, and I'm personally comfortable with PIA for now.
Also note that mandatory data retention in the States is no longer in place, however, internet metadata is still retained for one year by many large US corporations such as Amazon through NSA surveillance programs succeeding operations like Prism and Muscular.
Good point. Most VPNs have servers on AWS or Choopa, and this is why metadata is still recoverable in some cases. Maybe this is why, in the case referenced above, investigators knew that the alleged hoaxer resided in Southern California. Difficult for them to build a case off that, though.
