What Your ISP Sees Before Your VPN Turns On
Most people think about a VPN after something feels risky. Hotel WiFi. Airport WiFi. A random network called "Guest."
But your internet provider is in the path before any of that. At home, on your phone's carrier network, and on public WiFi, somebody is carrying your traffic. That company may not see everything you do, but it can still see enough to build a useful picture.
The important detail is timing. If your VPN is off while your device wakes up, checks apps, looks up websites, and syncs in the background, that first burst of traffic goes out through the regular network.
What your ISP can still learn
HTTPS protects the contents of most websites. Your ISP generally should not see the exact article you read, the password you typed, or the message you sent inside a properly encrypted app.
But metadata is still data. Your provider can often see DNS lookups, the domains you connect to, connection timing, rough volume, device patterns, and the IP addresses you reach. The FTC has warned that large internet providers can combine browsing data with location, app usage, demographics, and other account information.
That does not mean a person at your ISP is sitting there reading your history. It means the network can produce records, and those records can be useful for advertising, analytics, fraud scoring, and data sharing unless a law or company policy limits it.
Where the law helps, and where it gets messy
In the US, there is no single simple privacy rule that says every ISP must treat browsing history the same way. The FCC broadband privacy rules that would have required stronger permission for sharing sensitive data were repealed in 2017.
Since then, privacy protection has been a patchwork. The FTC can act against unfair or deceptive practices. State privacy laws, including California's privacy rules, may give some people the right to opt out of certain sales or sharing. More state privacy laws are taking effect in 2026, which is good, but it also means your rights can depend on where you live.
So yes, you should use the privacy controls your ISP gives you. Log in to your account and look for ad personalization, data sharing, and privacy opt-outs. Just do not confuse an opt-out checkbox with network privacy. They solve different problems.
What a VPN changes
A VPN moves the first hop of trust. Instead of your ISP seeing all the different domains your device is talking to, it sees an encrypted tunnel to one VPN server. The websites and apps still work, but the local network has a much less useful view.
This is why always-on matters. If your VPN only turns on after you remember it, your phone and laptop may have already made dozens of small background connections. Email checked. Weather updated. Browser tabs refreshed. App notifications synced.
A good habit is simple: turn the VPN on before you start browsing, and leave it on unless something breaks. Banking sites, streaming apps, or work tools may sometimes complain. Fine. Turn it off for that task, then turn it back on.
A VPN does not make you invisible. It does not stop every tracker, replace good passwords, or erase your account history. It just keeps your ISP and the local network from getting an easy map of your browsing life.
If you want a simple always-on option, 99¢ VPN is $11.88/year for one WireGuard device. No giant bundle. No twelve-step privacy dashboard. Just a cheap encrypted tunnel you can leave on.
The bottom line: your ISP probably does not need the full contents of your browsing to learn a lot. The domains, timing, and patterns already say plenty. A VPN makes that picture much blurrier, which is usually the point.
Written by the person who runs 99¢ VPN. Not legal advice. Just a practical explanation of what changes when your traffic goes through an encrypted tunnel first.