This is possible since “free” is not always really free, they have to be getting something in return.

But I’m curious though, if free VPNs are spying, how about the premium ones? I’m sure they’re also capable of spying.
Don’t we consider them risky as well?