Technically, nothing. But, among other things, a VPN is in the business of providing privacy. An ISP is not. If a VPN provider starts capturing and selling data, especially if their Terms of Service states they don't do it (always read those ahead of time BTW... they're not that scary to go...