Did You Just Give Spotify Permission To Invade Your Privacy?
The views expressed on this page are those of the author, not CBS Local Chicago or our affiliated television and radio stations.
Technology continues to advance at such a rate that it can be hard to fully understand the implications of using the latest mobile app or social media service. What kind of information do the services that allow us to communicate with each other, stream music and do various other things have? And what's more, do we want them to have that information?
With their latest privacy policy, Spotify just got a lot more hands-on with the data it collects from its users. In fact, the additions just might give Spotify permission to access things like your GPS location, contacts and even your photos.
Personally, I'm excited at the thought of them seeing some of my photos -- my selfies are the bomb. I could understand if you're not comfortable with this invasion of privacy though.
As pointed out by more than a few Internet users who apparently like their privacy, there are two passages raising alarms. (See the whole privacy policy here, btw.)
The first section worrying people: "3.3 Information Stored on Your Mobile Device."
"With your permission, we may collect information stored on your mobile device, such as contacts, photos, or media files," the passage states.
The second section spreading paranoia: "3.4 Location and Sensor Information."
Part of this section states, "... we may also collect information about your location based on, for example, your phone's GPS location or other forms of locating mobile devices (e.g., Bluetooth). We may also collect sensor data (e.g., data about the speed of your movements, such as whether you are running, walking, or in transit)."
Whether you're a premium Spotify member or use it for free doesn't appear to make a difference -- they want your data.
Charli XCX performs her latest single, "You Want To Do What With My Private Information?!" (Photo by Samir Hussein/Getty Images for Advertising Week)
Charli XCX performs her latest single, "You Want To Do What With My Private Information?!" (Photo by Samir Hussein/Getty Images for Advertising Week)
So is that good or bad?
Personally, my first concern was what constitutes "permission." Was agreeing to the new terms implicit consent for everything and anything, or would they need more permission if they wanted to collect more data? In a blog post from a few days ago, they tried to be clear and upfront about their upcoming privacy policy. In this post, they say they will in fact ask for further permission to collect some of this data: "We will always ask for individual permission or clearly inform you of the ability to opt out from sharing location, photos, voice and contacts."
Next, I wanted to know exactly they want to do with this data...
Their privacy policy answers this at length. First, they establish that they want to use this data to improve the experience of their customers. If you want cooler playlists, you'll give 'em whatever they want! The example they use in their blog post is Spotify Running, "which matches the BPM of your music to the pace of your run..."
Of course, they'll also use this data for advertising, not only within Spotify, but outside of Spotify too. Maybe you don't care, since you ignore ads anyway. Maybe you like having ads catered to your tastes. Or maybe, just maybe, you get creeped out when ads are a little too spot on (I Googled "furries" for work once, which had a really interesting effect to my Facebook advertisements).
Related: Congratulations, Chicago! You Now Have A Tax For Netflix, Other Streaming Services…
What's a little more unclear is how Spotify will share this information with advertisers and marketers. Information is valuable, which is why it's easy for services to give people free access, because they can sell whatever statistics they mine from their customers to the highest bidder. If you give them permission to see your address book and photo gallery, will they truly keep that data for themselves to help improve your experience with their services, or will they also sell it to an advertising/marketing firm that wants to manipulate you and your friends into buying the latest Apple-Coca-Cola-Avengers-Snuggie-Whatever?
Even if Spotify were to pinky swear that your data is safe with them, there's still the threat of hackers. Each week there's a new privacy breach at various companies thanks to hackers -- from Ashley Madison, to Apple and Target -- guaranteeing that pretty much no one is capable of protecting your data. So even if you trust Spotify with your GPS locations, do you trust the faceless hackers who might steal it from them?
Even with the ability to customize what data Spotify gets access to in your preferences, it seems like using this app offers some degree of danger. If those dangers worry you, but you still want to use the app, here are some instructions for setting your privacy preferences within Spotify.
Is this a deal breaker? Is it time to abandon Spotify?
I have no clue.
The sad part is, these techniques are endemic throughout many of the apps, social media platforms and websites you use. Spotify is by no means an exception. And while my personal paranoia makes me want to throw my phone into the lake and start wearing a tin-foil hat, my laziness -- which is a hell of a lot more influential -- makes me want to shrug it off as I continue to stream All Star Jock Jams vol. 208.
You, friend, are going to have to figure out where you want to draw the line on your own. Do you really want to give Spotify access to all those sweet cat pics on your phone? If you're not sure of your answer, you might want to take another look at their privacy policy and statement on it one last time...
Update 8/21/2015 11:00 am: In a blogpost titled "SORRY," Spotify CEO Daniel Ek clarified a few aspects of the newest privacy policy. His biggest clarification dealt with permissions; he stated that Spotify will get explicit permission to access things like your photos, contacts and location. He stated that the company will be updating the privacy policy after hearing the many concerns of the Internet. On Twitter, he also emphasized that many of the permissions Spotify is seeking are directly related to upcoming Spotify features, like the ability to add a photo to a playlist to personalize it.
Still, many of the questions I raised above still seem valid. On one hand, it'd admittedly be difficult for Spotify to attempt to grow and add features without getting the new permissions they're requesting. On the other hand, just because they're asking for these permissions for new features doesn't guarantee your data is safe with them. At the end of the day, all of this really emphasizes the ways we're still struggling to understand and grapple with the idea of privacy in the digital age. I expect more situations like this to arise in the future...
Mason Johnson is a Web Content Producer for CBS Chicago. You can find him on Twitter.
