Comment by Gnewt

You place full trust in the provider of your VPN. If you'd like to use PIA, you have to trust them -- and you can make your own decisions about that. I think it's fairly reasonable to trust them based on available evidence, but it really depends on your threat model.