SiriusXM: Music, Sports & News Security & Privacy Scorecard
Android
Listening habits, location, and device activity are shared with multiple advertising and analytics companies, including Salesforce Marketing Cloud and AdsWizz, for ad targeting. Purchase activity flows through Amazon and Branch.io, and crash data is sent to Sentry. Network protections are weaker than average, meaning connection data travels with less protection than expected.
Best for
Radio fans comfortable with ad targeting and analytics
Findings
- 2 critical
- 4 high
- 5 medium
- 2 low
- 4 info
1 issue identified across security and privacy analysis.
Top security issues
- Cleartext Traffic Permitted in Production
- User Certificates Trusted in Production
- Salesforce Marketing Cloud API Keys Exposed
Top privacy issues
- Pre-Consent SDK Initialization
- AdsWizz Device Fingerprinting
- Google Sign-In OAuth Tokens Stored in Plain Text
Full analysis
SiriusXM: Music, Sports & News
What This Means for You
Listening habits, location, and device activity are shared with multiple advertising and analytics companies, including Salesforce Marketing Cloud and AdsWizz, for ad targeting. Purchase activity flows through Amazon and Branch.io, and crash data is sent to Sentry. Network protections are weaker than average, meaning connection data travels with less protection than expected.
Recommendation: Use With Caution
Best For: Radio fans comfortable with ad targeting and analytics
Key Findings
Data Security - 5 findings (2 high, 3 medium)
Network Security - 2 findings (2 critical)
Code Safety - 0 findings
Privacy - 3 findings (1 high, 1 medium, 1 low)
Privacy Concerns
What Data is Collected
SiriusXM collects listening history, location data, device identifiers, and in-app behavioral activity. This information is used to personalize content and serve targeted advertising.
Third-Party Data Sharing
User data is shared with the following services:
- Salesforce Marketing Cloud - Advertising and marketing targeting
- AdsWizz - Audio advertising delivery
- Amazon In-App Purchasing - Purchase transaction processing
- Branch.io - Marketing attribution
- Firebase - Analytics and performance monitoring
- Conviva - Streaming quality measurement
- AltBeacon - Location and proximity detection
- Sentry - Crash and error reporting
- Google Play Services - Core platform services
- Google Cast SDK - Media casting to external devices
- Google Engage SDK - User engagement features
Understanding the Scores
| Category | Score |
|---|---|
| Security | 45/100 |
| Privacy | 52/100 |
| Data Security | 48/100 |
| Network Security | 25/100 |
| Code Safety | 75/100 |
| Data Collection | 65/100 |
| Data Sharing | 70/100 |
| User Control | 75/100 |
Positive Security Features
No notable positive security practices were identified in this analysis.
Areas for Improvement
- Network connections rely on weaker protection settings than current standards require, leaving user data less protected while it travels between the app and its servers.
- A large number of advertising and analytics services receive user behavioral data, giving users limited ability to control how activity is used for targeting.
- Data handling practices in several areas fall below current standards, particularly around how user information is secured within the app.
About This Analysis
App Details
| App | SiriusXM: Music, Sports & News |
| Package ID | com.sirius |
| Version | 7.24.0 |
| Scan Date | 2026-03-03 |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 48/100 |