That VPN you use to protect all your phone traffic? It’s probably leaking.

If you look at a businessman’s iPhone, you’ll see a little VPN icon in the status bar. A VPN is a Virtual Private Network, like a secure pipe that protects your data as it travels. This tunnel secures a connection to a corporate network, it can hide the content and destination of web traffic and messages from dissidents in hostile regimes, or it can simply be a way to get American Netflix from outside the US. But security researcher Michael Horowitz has discovered that on iOS, these VPN pipes leak, like the plumbing in a cheap New York hotel.

“A VPN encrypts the traffic between any iOS device and the internet, and it also hides your device’s IP address, making you invisible to the websites you visit,” Hamza Hayat Khan of Ivacy VPN told Lifewire via email. “An operating system would have to close all existing internet connections and then re-establish them through the secure VPN tunnel, so all traffic would pass through unseen. But in the case of iOS, it doesn’t actually close and re-establish all existing connections.”

The idea of a VPN is that it routes 100% of your internet connections, encrypts them, and hides them from all onlookers. Not only do they hide the actual data being sent and received, but they can also hide your location. No one can see anything along the way. Not your ISP, no one.