For any phone, the only VPN I really trust lately is Mullvad. Pay with mailed cash, crypto, or (if you really have to) a credit card or PayPal. With harder-to-trace payment methods, and the fact that they only give you a random account number (no email, phone number, address, name, etc. attached to your account) makes it the best at its job of any that I've seen. A VPN only improves your privacy if the VPN provider itself is trustworthy and proven.
Oh, and don't use the built-in browser if you're on Android. iOS as well, but to a lesser extent. Apple is pretty good about privacy when it comes to not leaking your stuff to other companies, but that doesn't mean Apple isn't spying on you. I've been running a hardened Firefox mobile for some time, but that's a deeper topic on its own.
You can find great privacy-respecting, free and open source apps on the F-Droid repository for Android too. Take a peak around there and see if you find some software that can replace your daily drivers.