VPNs don’t guarantee anonymity. There’s no reason they cannot sell your data. Last I heard there isn’t any contractual obligation. Organizations like nord and surfshark are fully capable of saving your data, as well as selling it off to the highest bidder, if they choose to do so. Only services like Mullvad can guarantee anonymity because even they don’t know what you’re doing with their service.
Its a clear sign they feel threatened. Their fall is near.