I believe NordVPN has a no-log policy, but legally that's analogous to giving your post to a man who says "I'll take it to the Post Office for you!" then assuming he won't read it. I know HTTPS makes it a lot harder to snoop, but metadata is valuable.
