The good news is, HTTPS is pretty common these days and Cloudflare just launched encrypted DNS (1.1.1.1). Those two things cover a large portion of exposed data.
If you're on Android, this is an excellent app that allows you to set a custom DNS server across all apps and connections, without root: https://f-droid.org/en/packages/org.jak_linux.dns66/. As a bonus it also lets you blacklist domains, though of course that's not relevant to concerns about your ISP.
If you're on Android, this is an excellent app that allows you to set a custom DNS server across all apps and connections, without root: https://f-droid.org/en/packages/org.jak_linux.dns66/. As a bonus it also lets you blacklist domains, though of course that's not relevant to concerns about your ISP.
Be wary of third-party VPNs, though (bottom section titled "VPNs could put you at risk"): https://arstechnica.com/information-technology/2016/06/aimin...