Text:
I consent to Plex to: (i) sell certain personal information (hashed emails, advertising identifiers) to third-parties for advertising and marketing purposes; and (ii) store and/or access certain personal information (advertising identifiers, IP address, content being watched) on my device(s) and share that information with Plex’s advertising partners. This data is used to deliver personalised ads and content, ad and content measurement, audience insights and product development. Your consent applies to all devices on which you have Plex installed. You can withdraw your consent at any time in Account Settings or using this page.
Soure: https://www.plex.tv/vendors/ (Might have to clear cache)
Can also read about the changes here: https://www.plex.tv/about/privacy-legal/
I'm not a security expert but my guts (and the many things I read about this stuff over many years) tell me that cheap highly marketed VPNs like Nord seek the less informed users that sign up because half of their favorite youtubers sent them there, the default M.O. is install the (proprietary) app. It might be possible to use them safely but it's not what's happening to 99% of the customers.
They operate in grey legal areas, there are many scandals over the years, they write in their TOS that they can change the terms themselves without notice, if you use their service, you agree at any time.
When I wrote that they do what they want w your network, this is what I'm referring to; idk about the "settings", more like selling access to your residential line (perhaps to other VPN customers)