Four top VPNs share your data with marketing software – and we worked out if you're at risk