No-logs needs a scope
Separate traffic logs and connection metadata from account, billing and support records. A provider may process personal information while saying it does not log browsing activity.
An audit is a snapshot
Check the auditor, the year, the systems examined and whether you can read the report. A code review and a no-logs assurance engagement answer different questions. Neither guarantees future conduct.
Compare privacy evidence