PureVPN History and Timeline: Growth, Controversy and Change

PureVPN History: The Balanced Version

PureVPN’s history cannot be summarised fairly as either a straightforward success story or a company permanently defined by one controversy. Both parts matter.

The service has operated since 2007, expanded across desktop, mobile and television platforms and survived several major shifts in the consumer VPN market. It later adopted clearer no-log wording, commissioned external assessments and moved its legal jurisdiction to the British Virgin Islands.

However, the 2017 federal affidavit remains a material part of its record. It showed that PureVPN could identify the originating IP addresses used by a customer at home and at work. That was inconsistent with how many customers understood the provider’s broad no-log positioning at the time.

How PureVPN Started

PureVPN’s official About page says the service launched in 2007. It names Uzair, Umair and Aqib as newly graduated founders who began commercialising a product created in their spare time.

The company says the first network contained two servers and expanded to 16 during 2007–2008. Windows and Mac applications followed in 2009–2010, with Android and iOS apps listed for 2011–2012.

These early milestones come from PureVPN’s own company history. They are plausible and internally consistent, but user counts, staffing numbers and claims of being first in the market should be treated as company-reported rather than independently audited.

PureVPN Timeline

What Happened in the 2017 Logging Controversy?

The controversy arose from a US cyberstalking investigation. The relevant federal affidavit described several online services used during the alleged activity and explained how investigators linked accounts and network connections.

According to the affidavit, PureVPN records showed that the same customer accessed the service from two originating IP addresses: one connected to the home where the suspect lived and another connected to his employer.

The trust problem was nevertheless significant. At the time, many customers understood “no logs” to mean there would be no records capable of linking their account to an originating IP address. PureVPN’s distinction between browsing logs and connection records was not sufficiently clear to prevent that expectation.

PureVPN later argued that it complied with its policy and legal obligations as they existed at the time. That defence explains the company’s position, but it does not remove the gap between the technical records available and how customers interpreted the marketing.

What Changed After 2017?

PureVPN says it revised its privacy policy in 2018. The updated wording explicitly rejects retaining browsing activity, original IP addresses, assigned VPN addresses, connection times, visited sites, outgoing traffic and DNS queries.

Clearer wording was an important improvement because it addressed the exact type of ambiguity exposed in 2017. A policy statement alone, however, cannot prove how every server is configured. That is why the later external assessments matter.

How Strong Is PureVPN’s Audit Record?

PureVPN has publicised a 2019 Altius IT assessment and later KPMG assessments. The reported findings support the claim that the examined systems and configurations matched the provider’s newer no-log policy at the time of review.

The “always-on” arrangement is also a positive feature: PureVPN says KPMG can initiate an assessment without agreeing a date in advance. That reduces the provider’s ability to prepare only a temporary audit environment.

Who Owns PureVPN and Where Is It Based?

PureVPN’s current Terms of Service state that the service is owned and operated by GZ Systems Limited, a British Virgin Islands limited liability company. The terms also identify an associated Cyprus company, GZT Associates Limited.

PureVPN says the business originally launched in Hong Kong and decided in early 2021 to relocate its headquarters and legal jurisdiction to the British Virgin Islands.

The BVI is presented by PureVPN as a jurisdiction without mandatory data-retention requirements applicable to its service. That may reduce certain legal pressures, but jurisdiction alone does not prove privacy. A provider can keep logs voluntarily in a favourable jurisdiction, while a technically minimised service can offer meaningful protection elsewhere.

PureVPN History: Strengths and Concerns

PureVPN Today

PureVPN’s current website describes a service with more than 6,000 servers across more than 65 countries, up to ten logins and more than three million users. These are current provider claims and may change as infrastructure and product plans are updated.

The company now presents itself as more than a basic VPN, promoting tools such as dark-web monitoring, password management, tracker blocking and data-removal services alongside its core encrypted connection product.

This broader strategy can add value for users who want multiple privacy tools in one ecosystem. It also means reviewers should assess each product separately rather than assuming that a VPN audit automatically verifies every add-on.

For testing of the current apps, performance, features and privacy controls, read our updated PureVPN review. Readers considering a subscription can also check the current testing and refund routes in our PureVPN free-trial guide.

How This History Was Researched

The timeline prioritises a small number of strong sources rather than linking every company announcement.

• Primary evidence: the 2017 federal affidavit and current PureVPN legal terms.
• Company records: PureVPN’s About page, policy-change explanation, audit summaries and headquarters announcement.
• External confirmation: the VPN Trust Initiative’s accreditation announcement.

Provider claims are labelled as such. Audit findings are described as applying to the systems and period assessed. Current network and user figures are not presented as independently verified.