The Platform Takes a Share of Every Subscription

Two facts about the app stores change a free VPN’s arithmetic before a single byte moves: the platform keeps a share of subscription revenue sold through it, and the platform decides how much cross-app tracking an ad-funded app is allowed to do. Both are levers held by someone who is neither you nor the provider, and both explain patterns that otherwise look like arbitrary product decisions.

Neither is a criticism of the platforms. They are simply the terms on which distribution to a phone is available, and every funding model has to survive them.

The commission lands on the funded half

When you subscribe inside an app, the store processes the payment and keeps a portion. The provider receives the rest, and it is the rest that has to cover bandwidth, capacity, addresses, and everything else in the cost base that grows with users.

Three consequences follow.

The conversion a free tier is designed to produce is worth less than it looks. A free user costs the provider full price to serve and, on conversion, delivers less than the sticker revenue. That tightens the calculation behind where the cap goes in a direction that favours smaller free allowances.

Providers push you to their own website to pay. A checkout on the provider’s site avoids the platform’s cut entirely. This is why the app so often declines to sell you anything and sends you to a browser instead, and why the account you create belongs to the provider rather than to the store.

Long prepayments get more attractive. One transaction covering a long period is one commission rather than many, alongside the cash-flow reasons in why a lifetime VPN deal is a funding model.

Consent rules reprice the advertising half

The other lever is platform policy on tracking. On the stricter platform, an app that wants to identify you across other apps and sites has to ask, in a system prompt, and most people decline. Both major platforms also require self-reported disclosure of what an app collects — the labels described in reading app store data labels as a funding signal.

The economic effect is direct. Advertising revenue depends heavily on targeting, and targeting depends on identifiers that the platform now gates. An ad-funded free app therefore earns materially different amounts on the two platforms for the same user doing the same thing. So does anything whose value depends on onward use of app-derived data.

That is the mechanism behind a pattern people notice and misread: the same category of free app is generally more aggressively monetised on the more permissive platform. It is not that one platform’s users are treated worse out of malice. It is that the funding model works there and works less well elsewhere.

Why the same brand can be funded differently per platform

Put the two levers together and you get a provider facing different economics on each platform:

Where advertising pays well, a free tier can be larger, because ad revenue partly covers the traffic. Expect a more prominent ad experience and more third-party components inside the app — see what an ad-funded VPN is actually selling.

Where advertising pays poorly, the free tier has to be justified as a funnel instead, so expect tighter caps, harder upgrade prompts, and a cleaner-looking app. The cleanliness is a consequence of the ad model not paying, not evidence of a different attitude to your data.

Where the platform’s own subscription plumbing is the only practical way to charge you, the commission is unavoidable and the free tier has to work harder.

This is worth knowing because it means a free tier’s generosity is partly a fact about your device, not only about the provider. Comparing the same service across two phones is not comparing like with like.

The browser extension sits outside all of this

Browser extension stores generally do not sell subscriptions and do not police cross-app identifiers in the same way, and the extension itself has a much lighter cost base to begin with. Different distribution terms, different funding pressure — covered in why a free browser VPN costs less to run.

Review and disclosure are costs too

Getting into a store is not free even when nobody is charging you.

Policy compliance is engineering work. Disclosure requirements, permission justifications, and rules about what a VPN-capable app may do change over time, and each change is unplanned work.

Rejection risk is a scheduling cost. An update that fails review is a delay you cannot fully control, which pushes small operators toward doing less.

The disclosures are self-reported and enforced by audit rather than by verification. That is exactly why the labels are useful as a funding signal rather than as proof — a provider declaring data collection it does not need is telling you something about its revenue, and one declaring nothing has told you only what it wrote.

What to check

1. See whether the app will sell you a subscription at all. Being sent to a website is a commission decision, not a red flag.
2. Compare the free tier’s limits across platforms if you use more than one. The differences are usually funding, not favouritism.
3. Count what the app asks for. A tracking-consent prompt in a VPN app is a statement about the revenue model.
4. Read the store data labels on the platform you actually use, since the same provider files them separately per platform.
5. Notice how many third-party components the app announces. Ad and analytics integrations are the visible edge of an advertising funding model, and the model as a whole is one item on the list in how free VPNs make money.