Comment by kfreds

> one of the ways you can evaluate companies is to recognize when they're making sketchy, not-relevant claims to create an air of legitimacy.

This is an excellent heuristic. Personally I like to evaluate trustworthiness in terms of integrity and competence - can I trust their values and can I trust that they know what they are doing? Words are cheap of course. Consistent action across several years is much harder to fake. It also overlaps with another heuristic I use to model and predict the behaviour of a company; a company's behaviour will converge on the shareholders' goals over time.

> This "our servers have no disks" thing is kind of thing is marketing.

You are correct that we considered that aspect while writing the blog post, but please read the content before passing judgement. See the section titled "To recap about “no disks in use”" in particular.

On the topic of "air of legitimacy" I'll just leave these here:

* Our apps have been open-source since we launched in 2009

* Our response to Shellshock: https://www.sigsum.org

We're certainly not without fault, but hopefully this helps inform your opinion of Mullvad.

Best regards, Fredrik Stromberg (co-founder of Mullvad VPN, Tillitis, Glasklar Teknik)