Best VPN for mobile & desktop?

Public VPN's are anything but private.

A VPN can do absolutely nothing to hide any data going between you and the site you're viewing since only half of the communication is encrypted. Anything going to the site from the VPN and back to it is in the clear, or the site you're accessing would have no idea what to do with the encrypted data.

A VPN has only two uses:

1. You're using it to send and receive content from a truly tunneled VPN at your place of employment. Only the servers at the office get the unencrypted data from you as output from the VPN. Anything coming back to you is encrypted. Meaning, anyone trying to capture data between you and the office will only ever see encrypted data. A hacker would have to somehow breach the business' server on the clear input/output side, or your end to get anything.

2. You're trying to hide yourself. Since a VPN encrypts what's coming back to you, it does a good job at hiding what IP address the data is going back to (and as the link mentions, even this doesn't do a good job of hiding you anymore). However, any and all VPN's log this data. If you do anything illegal and law enforcement tracks the clear data back to the VPN (and they can), they'll demand log data to see what IP address the data was output to. The site running the VPN will give you up. They aren't going to go to jail for what you do.

Free VPNs sell your data.  (just one of many sites explaining this)

This isn't exactly breaking news. It's been known for a very long time that free VPN's (in particular) log and sell your data. How else do you think they pay for their servers?

It's the same model as Google, and in particular, Chrome. You are the product. Chrome runs a background daemon from the moment you turn your computer on, whether Chrome itself is running or not. Its job is to constantly send anonymized data back to Google about your web and personal computer usage.

No matter what web site you're communicating with, only what you send to the VPN and it sends back to you is encrypted. Every bit of data out of the VPN to the site you're visiting, and from there back to the VPN is the same as using no VPN at all. It has to be, or the sites you're visiting would just get a load of encrypted data they can't do anything with. NordVPN has recently been sued for deceptive practices by making it nearly impossible to unsubscribe

VPN reviews you find online are also almost completely untrustworthy:

Former Malware Distributor Kape Technologies Now Owns ExpressVPN, CyberGhost, Private Internet Access, Zenmate, and a Collection of VPN “Review” Websites

Don't do it. There is a use for a VPN when required to access employer servers, but in that case, the employer will provide the VPN to use along with specific settings for access.

If you think you need it for Security/Privacy, you are not getting that. In fact In many cases, you are doing the exact opposite. There are many more cases that can be cited, but Kurt Lang summed it up quite well. Nord VPN is the worst and when installed on a desktop, good luck trying to remove it.

The best VPN is none at all. Not a single one of them provides any additional security.

You need to look for it in the App Store or Google search.

In Apple Support Community, the focus is typically on helping users and providing solutions rather than promoting or advertising specific apps. If I suggest apps from the App Store as a community member, it's possible that the community moderators might consider it as a promotion or advertising.

They have guidelines in place to prevent excessive promotion, spam, or conflicts of interest. These guidelines are designed to ensure the community remains a helpful and unbiased space for users to seek assistance.