Facebook bought Onavo, a VPN service, in 2013 to collect, analyze, and market its users’ browsing behavior—the very kind of activity that any person would believe a VPN serves to protect. It is now underhandedly promoting the app to track even more people’s online activity.