Most people in a crowded coffee shop never realize how much their laptop broadcasts over public Wi-Fi. I assumed the visibility was close to zero, long before I ever bothered turning on a VPN. Then I sat down at The Domain in North Austin one afternoon, opened my laptop, and started paying attention to the network instead of my screen.
Full disclosure before we go further: this article has affiliate links in it. If you click through and sign up for something like Proton or DeleteMe, I earn a small commission at no cost to you. I only mention products I've actually paid for and used to clean up my own privacy mess, not ones some ad network told me to promote.
I'm not a cybersecurity professional or a privacy lawyer, for what it's worth. I'm a self-employed marketing consultant who ended up serious about this after finding more of my own information online than I was ever comfortable with, and who now does a chunk of client work from Austin coffee shops out of habit as much as anything. That's the whole résumé — it's enough to know what actually helps and what's just marketing copy.
What Your Laptop Actually Announces on Public Wi-Fi
We've all been trained to trust the little padlock icon that shows up next to a web address — the one that means HTTPS is doing its job. And mostly, that trust is earned: the contents of your email or your bank transfer really are scrambled in transit. But treating that padlock as the whole answer is like assuming nobody at a cardiologist's office knows why you're there just because they can't see inside the exam room. They still watched you walk in the front door.
Meanwhile, your laptop is usually saying a lot more than you'd like on that same network. Computer names, DNS lookups (the internet's phonebook, more or less), background app check-ins — all of it tends to be visible to anyone else on the network running basic packet sniffing software. I once sat two tables away from a guy whose laptop was still broadcasting his full name because he'd never bothered to change the default computer name, which is a strange thing to notice about a total stranger.
A VPN Protects the Pipe, Not the Destination
Here's the part the marketing pages tend to skip: a VPN can make you feel safer than you actually are. I've watched people turn one on and then click straight through a browser warning about an expired certificate, as if the encrypted tunnel somehow vouches for the site on the other end of it. It doesn't. A VPN protects the path your data takes — not what's waiting for you when you get there.
That distinction matters more than most VPN ads let on, and it's really the whole reason I bother with one at a coffee shop instead of just trusting the venue's own network. It's less about becoming invisible and more about not being the easiest target in the room — the same logic behind a credit freeze you set up once and then forget about, or the classic junk-mail problem that just migrated onto the internet. Once your information is loose, clawing it back is a slog. That's part of why I ended up on Proton: not because it's flashy, but because it's built around a Swiss privacy framework instead of a growth team.
My neighbor Jonah, a financial planner, still won't just read the setup instructions himself — he'll text me a screenshot and ask me to walk him through turning the VPN on before every trip, step by step, even though it's basically a two-tap process. I don't mind. It's a good reminder that "just use a VPN" is easy advice to give and slightly less easy to actually follow when you're not the one who tests this stuff for fun.
How My Privacy Stack Actually Fits Together
After bouncing between single-purpose apps for a while, I moved most of my own setup into the full Proton bundle — mail, VPN, drive, and calendar under one login. Not juggling five separate passwords just to send a client brief from a cafe table turned out to matter more than I expected. Proton Drive also runs on a zero-access model, meaning even Proton itself can't read what I store there, which is a nice property to have if a laptop ever gets left somewhere it shouldn't be.
For passwords specifically, I still lean on RoboForm paired with a physical Yubikey clipped to my keychain (my partner calls it overkill; I call it cheap insurance). I won't get into the weeds of what makes a hardware key different from a plain password manager here — that's a rabbit hole for another day — but the short version is the two together cover more of my actual risk than either one alone. On the family-plan side, a DeleteMe plan tops out at four people, which is fine for most households but worth checking before you assume everyone in your family is covered.
The Data Broker Problem a VPN Can't Fix
None of this touches the data that's already sitting on broker sites from years before I ever thought about any of it. That's a separate problem, and a VPN has nothing to do with fixing it — it only stops new leaks, not old ones. I ended up paying for both DeleteMe and Incogni after getting tired of doing it by hand, and I've written up a longer Incogni vs DeleteMe comparison if you want the granular differences in coverage.
Before paying for anything, I spent a chunk of a weekend working through a two-year-old opt-out spreadsheet someone had posted in a Facebook privacy group. It wasn't useless, exactly, but half the broker links were dead and the instructions assumed forms that had since changed, and I gave up well short of finishing it. That's really the trade-off in a sentence: doing it manually can work, but it costs you hours you may not have, and the paid services are mostly buying back your own time.
There are dozens of these broker sites, more than anyone reasonably tracks on their own, which is really the whole argument for a service instead of a spreadsheet. Coverage differs by provider too — a contact of mine from a privacy subreddit, Seth Calder, ran a parallel comparison around the same time and kept finding coverage gaps the polished dashboards never mentioned. Get pulled from one of these sites and there's a decent chance it re-lists you again a few months down the line, which is its own frustrating topic I won't unpack here. None of this, either, is related to what happens if one of your actual accounts gets caught in a breach — that's a separate checklist and a longer conversation than a coffee shop VPN article has room for.
Five Weeks In: What Actually Changed
Around the fifth week of running the removal requests and the VPN habit in parallel, I pulled up Spokeo out of pure habit one evening and noticed the field that used to list my wife's maiden name was just blank. I said something out loud to nobody in the kitchen. A few nights later a removal confirmation landed in my inbox at two in the morning, from a broker site I'd genuinely forgotten submitting a request to — which tells you something about how slow this process actually moves compared to how a VPN works instantly, every time you connect.
It's worth separating two things people tend to lump together: getting a listing out of Google's results and getting the broker's own database record deleted are not the same job, even though they look identical from a search results page. Using DeleteMe to chip away at the second one, on top of a VPN that handles the first problem — what leaks while you're actually online — feels less like one fix and more like locking the front door today while also dealing with graffiti somebody left on the fence last week.
A Short Checklist for Working From Anywhere
A few habits have stuck for me beyond just running a VPN. I rename any new laptop away from the default "so-and-so's MacBook" the first day I own it, since there's no reason to hand out my name for free. I keep the kill switch turned on so the connection cuts out entirely if the VPN drops instead of quietly falling back to the open network, and I still read browser warnings about unsafe sites instead of assuming the VPN makes them irrelevant, because it doesn't. File sharing stays off by default too, since a "public" folder on a cafe network is exactly as public as it sounds. And before I get rid of an old work laptop, I run EaseUS BitWiper on it first — wiping an SSD isn't quite the same process as an old spinning hard drive, but the tool handles that difference so I don't have to think about it, and it goes well beyond hitting delete on a folder. There's a longer rundown in my piece on the best software to wipe laptop data before you hand a machine off to someone else.
Privacy as a Habit, Not a Destination
Nobody's invisible after doing any of this, and I'd be skeptical of anyone who tells you their product makes you disappear completely. What a VPN at a coffee shop actually buys you is a higher cost of entry for whoever's sitting three tables over — the difference between an unlocked front door and one that at least requires effort to open. When I close a client brief now, I'm not double-checking whether my DNS requests just leaked my browsing history to the room, because the Proton bundle handles that quietly in the background. If there's one thing worth taking from all of this, it's that privacy holds up best as routine maintenance you glance at now and then, not a project you finish once and forget — closer to a subscription you thought you canceled that somehow still bills you every month.
If your own name search ever turns up more than you'd like — an old address, a relative's name, anything that makes your stomach drop the way mine did — the removal side of this is a bigger topic than one coffee shop article can cover, and I've laid out the fuller process in how to clean up your digital footprint. Turn the VPN on before you order your coffee, though. That part takes about ten seconds, and there's no version of it that isn't worth doing.