Back to the journal

Privacy

What a VPN on a travel eSIM hides, and what it leaves in view

A VPN moves trust rather than removing it. Here is who can still see what when you run one over travel data, what it costs in battery and speed, and where local law gets a say.

5 min read

A VPN is usually sold as a cloak of invisibility, and on a travel eSIM it is tempting to treat the two as a matched pair: private data, privately routed. The reality is more useful than the marketing. A VPN changes who can see your traffic and what they see. It does not reduce the number of parties to zero, and it adds one you now have to trust.

Quick takeaways

  • A VPN hides the sites you visit from the local network and the operator routing your data, and shows them to the VPN provider instead.
  • On a home-routed eSIM, your traffic may already leave through another country before a VPN is involved.
  • Websites see the VPN server's location, but any account you sign in to still knows who you are.
  • The costs are battery, speed and services that refuse VPN traffic, and some countries regulate VPNs.
01

Four parties, four different views

Every connection from a phone abroad passes through several hands, and it helps to name them. There is the local network: the mobile network in the country you are visiting, or the Wi-Fi you have joined. There is the route your eSIM's traffic takes onto the internet, which may not be local at all. There is the website or app at the far end. Switch on a VPN and one more party joins the chain: the company running the server your traffic now passes through before it goes anywhere else.

Encryption already protects the contents of most of what you send. Secure sites and apps keep the pages you read, your login name and your messages away from everyone along the path. What they leave exposed is the envelope: which domains you connected to, when, and roughly how much data moved. That metadata is what a VPN actually changes, by moving it from one set of eyes to another.

  • The local network sees an encrypted connection to a VPN server, not the sites inside it.
  • The operator routing your data onto the internet sees the same tunnel, and nothing inside it.
  • The VPN provider sees what those networks used to see: the domains, the timing and the volume.
  • The websites you visit see the VPN server's address and location instead of yours.
02

Where your eSIM sends your traffic

Unless your eSIM was issued by an operator in the country you are visiting, your phone is roaming, and roaming data can reach the internet in one of two ways. With local breakout, the network you are visiting assigns your internet address and hands your traffic over close to where you are. With home routing, the traffic is carried back to the operator behind your eSIM profile, which assigns the address and sends it onward from there. An IETF analysis of roaming describes home routing as the main mode for international roaming of internet data.

Without a VPN, whichever gateway you leave through is in effect your internet provider for the trip, sitting where a broadband provider sits at home: able to see which domains you contact and when. On a home-routed plan, that position belongs to an operator in another country, which is worth knowing before you decide which network you most want to keep out of the picture. A VPN takes that view away from the gateway and gives it to the VPN provider instead.

03

The website sees the server; your account sees you

To a website, a VPN user appears to be wherever the VPN server is. That is the feature people pay for, and it is also where the privacy benefit is most easily overestimated. The moment you sign in, the site knows who you are whatever address you arrived from, and the history kept in your browser or in a signed-in account is exactly as revealing as it was before.

What you are really choosing, then, is which company holds the pattern of your browsing: the operator carrying your data or the VPN provider. Many VPN providers keep as much information as internet providers do, they are bound by the laws of the countries they operate in, and they are subject to law enforcement requests like anyone else. The choice of provider is the whole decision, not a detail of it.

04

What running one costs on the road

A VPN adds a detour. On a home-routed connection your traffic may already travel to another country before it reaches the internet, and a VPN adds another leg on top. Google's help pages for the VPN built into its Pixel phones are unusually candid about the cost: any VPN may increase data costs, reduce speeds, add latency and shorten battery life. Latency is what you notice on a call; battery life is what you notice at six in the evening.

Then there are the services that object. Some websites and apps behave differently or stop working while a VPN is connected, and streaming platforms increasingly block connections that look as though they come through one. When a service you need refuses, pausing the VPN for that task, or excluding the app where your VPN allows it, is usually better than abandoning the VPN for the whole trip.

  • Expect more delay and a faster-draining battery with the VPN switched on.
  • Pause it, or exclude the app, when a service you need refuses to work.
  • Keep it on where it earns its place, such as a Wi-Fi network you do not trust.
05

Some countries have a view on VPNs

Check the law before you check the settings. Policies on VPNs differ from country to country, bans included, which is why digital-rights groups advise keeping up with them. The UK government's travel advice for China, for example, notes that Chinese cybersecurity law requires online products and services such as VPNs to be licensed by the government, and tells travellers to stay informed and follow Chinese law.

The routine is short. Read your own government's travel advice for every country on the route, decide what you will do before you land rather than at a hotel desk, and remember that connecting through a foreign mobile operator does not change the law that applies where you are standing. A VPN that is not permitted at your destination is not a privacy tool there. It is a risk you have chosen to carry.

A VPN on a travel eSIM is a decision about whom to trust, not an escape from trust. It takes the pattern of your browsing away from the local network and the operator routing your data, and hands it to a company you chose; it leaves your identity visible to every account you sign in to. Choose the provider with care, accept the cost in battery and speed, pause it when a service objects, and check the law before you land.

Browse SilentSIM plans

Sources & further reading

Continue planning