Don't use the advertised VPNs, they are most likely FBI/NSA honeytraps. Don't use TOR, exits are owned by same

Use SSL, avoid external services, use self hosted VPN purchased with crypto, self hosted email and Cloud storage, private messaging apps, avoid TOR or use large number of jumps....

....basically stuff most non-IT people would have a really hard time doing