tadamichi - Fotolia
The new policy also states that Spotify may also collect sensor data, including information about the speed of a user’s movements, such as whether a user is running, walking or in transit.
“We will ask for your express permission before accessing any of this data – and we will only use it for specific purposes that will allow you to customise your Spotify experience,” he wrote.
Ek said Spotify should have done a better job in communicating what the new policy means and how any information that users choose to share will – and will not – be used.
He promised an "update" to the new policy in “coming weeks” to clarify the company’s intentions.
Ek said Spotify will never access users’ photos without explicit permission. “If you give us permission to access photos, we will only use or access images that you specifically choose to share,” he wrote.
He also said Spotify will never gather or use the location of a mobile device without the user’s explicit permission, will never access a device’s microphone without permission, and will never scan or import contacts without permission.
As regards mobile networks, Ek said some Spotify subscribers sign up through their mobile provider, which means some information is shared with them by necessity.
Read more about online privacy
- While IaaS and SaaS services are spreading in schools, the potential risks to the protection of students’ personal data are also growing.
- The Dutch Cyber Security Council says privacy will be one of its main focuses in 2015 and going forward.
- The battle between the citizen and the regulators will result in regulators becoming equipped with greater powers to use against businesses, a privacy lawyer warns.
“We also share some data with our partners who help us with marketing and advertising efforts, but this information is de-identified – your personal information is not shared with them,” he said.
It will be interesting to see whether the update makes any changes to the policy, and especially whether it changes or explains the sweeping sharing permissions which have raised the most concern.
For many users, “expressly” authorising Spotify to use and share the information provided with other companies in the Spotify group as well as “certain trusted business partners and service providers” may be a step too far.
Spotify says these partners may be located outside the country of the user’s residence, including countries “which do not provide the same level of protection for the processing of personal data” as the user’s country of residence.