Where your VPN provider is based matters. Here's a guide to privacy-friendly and privacy-hostile jurisdictions — and what it means for your data.