You have first to be the most degoogled you can, you have to abandoned the most of the big companies services as google, Facebook... Delete Instagram, do not use WhatsApp and Messenger, watch YouTube through Piped or Individious, uninstall bloatware on your phone (maybe install a custom rom, like /e/ os, a go-to for privacy). Be aware of what you post and your personal identity.
The only case when VPNs are the first thing to do is when you have to spoof your IP because of restrictions or any others..