[Mahn]

It's not. There's no way to verify the VPN provider is not keeping logs and tracking you.

[dredmorbius]

This is the principle-agent problem, generally.

Audits and reputation may help.