I’m confused. You’re saying cops came to your office 6 deep and just left with nothing even though your privacy policy says you have data [1]? There was no court case or investigation of any kind?
This blog post concerns me deeply for a number of reasons especially given a VPNs only actual differentiating value/proposition is trust.
I don't have a dog in this matter, but I read through their privacy policy. The data they might have or have access to is if you pay with anything other than cash. That data they are saying lies with the payment processor. They link their no logging user activity policy which cover that further. But, at the end of the day it's like you said, it comes down to trust if we are not able to / not going to verify.
What legal process? The officers were pursuing some kind of case and got a warrant for a possible lead, the lead turned out to be cold, the officers moved on to other evidence. What's so complicated about that?
I don't see why it's so difficult to believe. As noted on Mullvad's "Swedish legislation" page that you linked to, search of premises in a case like this is only allowed if there is a reasonable expectation of finding items subject to seizure (or other evidence of the offense in question). For what it's worth, the law itself is very readable, if you know Swedish [1].
Given that Mullvad are highly public about what data they store and why, Mullvad would arguably be able to make a strong case that there could be no such reasonable expectation. So the police had to weigh the potential gain of doing the search anyway against the risk of opening themselves up to lawsuits by doing so.
I would not have been surprised if they had decided to do it anyway, but I'm not really surprised at this outcome either.
This blog post concerns me deeply for a number of reasons especially given a VPNs only actual differentiating value/proposition is trust.
[1] https://mullvad.net/en/help/privacy-policy