VPN + 256bit encryption.
But VPN will make life slow and the encryption can be a hassle and won't work unless the people you deal with use it too and humans in general are far too lazy and apathetic when it comes to privacy, or hell, just Rights in general!
Now I'm no IT whiz, there are people much more versed in it than me, THEIS is someone you should talk to IMO. I just know a few things and understand how our government/corporations (the line is blurring) work and what drives greed in this country and that makes figuring out motive and/or what they "could" and likely "are" doing a lot easier. And I'm seldom wrong, unfortunately.
VPN only stops what Comcast (I assume you have Comcast since they have a defacto monopoly, they intentionally do NOT buy shitty, sparsely populated or hard to maintain areas so as to appear as not having a monopoly but every market worth a fuck is owned by Comcast now) or your ISP sees you doing, they wanted a piece of the pie a few years back so that's the deal there. VPN stops them from seeing where you GO which is all the info they get. Once you're there, google and all the other usual suspects are still spying once you log in to whatever --you gave them permission. Ad blockers, not storing any history, deleting google and ms's shit, not logging into or downloading shit from these places and not using facebook essentially stops the rest. I used to get this shit too, targeted ads and the like, until I made those changes.
I tape over the camera, I did this before Snowden did and was called paranoid (apparently I'm still paranoid and afraid of technology, though they know the "if you're not doing anything wrong" excuse is faulty, it's the only one they can come up with...). And I uninstalled the mic drivers and software in this computer, so I have a DAC and stereo headphones and a mic I can use for movies, music or playing video games --and what I use for appt.'s on the computer. I have to physically plug it in and activate it for it to work.
I also switched to "Smartpage.com" for a homepage and search engine. It's not the best, but they don't track you and privacy is their niche. What it does is to use Google's tech for the search but without all the other spy shit. Because it's not "you" searching but "smartpage" the results are far more generic. I've compared it to google though and the results are "good enough". I highly recommend it. Sad it has to be a niche... Anyway, I don't get advertisements in hotmail (which I still use) says "looks like you're using an ad blocker, but you can PAY US for no ads?" Fuck off, I got it for free. Firefox is probably gonna be your best big browser.
I used Strong VPN and it worked and I could set it up on the router (you can get a VPN on your computer but all the other shit is still unprotected if you don't install it on the router). Problem is that it SIGNIFICANTLY slowed shit down, to the point it was mostly unusable for anything other than searching and even that was slow.
So now I just use the Norton version on the computer (the Norton VPN is probably the easiest there is to set up, just turn it on really) the Playstation connected to the TV (what I use to stream) isn't protected. But it's also a much lesser device that can't really spy on me and if my watch list is that important to you, I'll give it to you. But stay the fuck out of my computer.