Wizard Swap supports Tor/VPN and uses spark addresses.
http://wizardswgtu2ovor7r2esg3cxdpt7tv4nrugi32lldv53zmtonbz6sid.onion/
If you have to use a transparent address for an exchange you can burn-to-redeem after and anonymize coins if your using Firo-QT.