That being said, the system is designed so as to not require trust in the front end. The JavaScript code is easy to read and ensures that queries are encrypted at the front end before passing thru a proxy to have its IP scrubbed. The engine then performs the query, encrypts the results and sends it back thru the proxy to the front end which decrypts and displays the results.
"Private.sh is a joint venture between Private Internet Access and GigaBlast."
PIA is generally regarded as not to be trusted since the sell off / sell out.