First thing I look at is location of HQ; from this depends how much privacy they can garantee. If it’s in the US, that’s an immediate nono.

I use Proton (Switzerland bases). Works great.