VPNs encrypt your traffic, but they aren't blind to your activity. Here's the metadata your provider can see—and how to spot services that misuse it.