The article you cited, to support your claim that NordVPN is owned by a data harvesting company, says the opposite. It says that Tesornet only provided general business consulting to Nord, and that Nord users have nothing to worry about.
It seems there are a lot of back and forth allegations about this topic on the internet. I don't know the truth. That article doesn't really demonstrate anything, though, and your tone seems unhelpful.
As a general rule of thumb, adjectives are often a crutch for weak arguments.
>"Shifty panamanian company"
But they explicitly chose to locate in Panama because it is exempt from 5 Eyes government data spying. That seems the opposite of shifty.
> "Suspicious links to data harvesters"
Have you ever used Google or Facebook? Run a service on GCP? If you run a service on GCP I could say you have "suspicious links to data harvesters." This seems like a scare tactic, lacking substance.