← Hall of Shame
C-

Privacy Policy Audit

Spotify

musicstreamingemotional-profilingbehavioral-datavoice
4,400
Word Count
18 min
Reading Time
1 min
Human Patience
6/10
Sneakiness

Translation Service

What They Say

Spotify's privacy policy is warmly written, in keeping with the brand's general aesthetic. They describe data collection as enabling personalisation, discovery, and the features that make Spotify feel like it knows you. They acknowledge microphone access is used for audio features and voice search, and they include a section on advertising that explains data is used to show "relevant" ads — which Spotify defines as ads matched to your music taste, location, and activity. The policy uses the phrase "we care about your privacy" without apparent irony.

What They Mean

Spotify's listening data is unusually intimate. What you listen to, when you listen, how often you skip, what you play on repeat at 2am — this data reveals emotional state, relationship status, stress levels, and psychological patterns in ways that most data collection does not. Spotify uses this for advertising. The 2019 patent for "detecting emotional state" from streaming data shows the direction of travel. When Spotify knows you have been playing sad songs on a loop for three days, this information has commercial value.

Worst Clause — Exhibit A

"We may ask for your consent to collect information from your device's microphone. If you give us your consent to do so, Spotify may collect information from your device's microphone to offer features such as voice control, and to improve our products and advertising. If you grant us access to your microphone, we will only access it when you are using our app."

Bureau Translation:

"Improve our advertising" is the critical phrase. Microphone access for "advertising improvement" goes beyond what most users expect when granting microphone access for voice search. Spotify rolled back some of these provisions after public backlash in 2015, but the current policy still includes advertising improvement as a stated purpose for microphone access. "Only when you are using our app" includes background app state on some Android configurations.

Evidence Tags — Data Collected

Complete listening history and playlist dataPodcast listening including timestamps and skip patternsSearch queries and browsing within the appLocation data (coarse and precise depending on permissions)Device identifiers and technical dataVoice data via Spotify's voice search featuresInferred emotional state from listening patterns

Bureau Verdict

"Spotify earns a C- for a policy that is better-than-average in readability and worse-than-average in the specificity of its data use for advertising. The emotional inference capabilities are real and documented, and the microphone access clause remains more expansive than necessary. The Bureau recommends Wrapped as an annual reminder of how much Spotify knows and how well they have trained you to be charmed by it."

C-

Overall Grade

Pleasant (On Brand)

Frequently Asked Questions

Dark Patterns Documented

See the full Dark Pattern Encyclopedia for documentation of each technique.

Audited: 2026-03-15