If to ask before from people the best way to buy ledger nano, almost every expert will recommend people to buy it directly from ledger official site because the wallet will be directly from them and shipped directly to the buyer's address.
It was quite a logical course of action if you wanted to buy a hardware wallet, until this happened with Ledger and showed us all that no one should be trusted with your personal information. Therefore, if you cannot make a purchase directly from the manufacturer without compromising your personal information, the best and safest option is to buy such a device directly in a physical store with cash.
I had this option for both (Ledger&Trezor), but I believed more in buying directly from the manufacturer which turned out to be completely wrong. The lesson has been learned, unfortunately in a difficult way - but it is a warning to anyone who is just planning to buy such devices, do everything you can to protect your privacy.