They really aren't more or less the same. There was a spate of free VPN apps that were responsible for delivering malware (https://www.techradar.com/vpn/google-warns-of-legit-vpn-apps-being-used-to-infect-devices-with-malware)
Some VPN's log data, others don't. It depends on what you are trying to achieve. Privacy Guides has a page (https://www.privacyguides.org/en/vpn/) that lists recommended VPN's for privacy enthusiasts. Spoiler, Proton and Mullvad are their main recommendations.
I've used SurfShark in the past, and it's been pretty good, but I use ProtonVPN 24/7 for the most servers across the globe, including TOR servers (Tor over VPN is best option).
Also, Proton's full suite has been GREAT for improving digital privacy. ProtonPass (now it's integrated with SimpleLogin) is a great way to up the privacy game 😁 (Feel free to ask if you want to know more about this side of things)