A VPN provider can harvest a lot of data from you. You have to trust your VPN provider. There are VPN providers that have been caught logging users data even though they promised that they weren't.

TOR is way more private than a VPN.

TOR sometimes sucks to use.