# Security & Privacy Scorecard

## Spotify: Music & Podcasts

**Package:** com.spotify.tv.android | **Version:** 1.123.3 | **Platform:** Android TV

## What This Means for You

Listening activity is collected to personalize recommendations, and Firebase Analytics tracks basic usage patterns. Data is not shared with third-party advertisers. Users stay in control of their account and listening history.

## Recommendation: Trustworthy

**Best For:** Streaming music and podcasts on the TV

## Key Findings

**Data Security** - 3 findings (1 high, 1 medium, 1 info)

**Network Security** - 4 findings (2 medium, 2 info)

**Code Safety** - 0 findings

**Privacy** - 2 findings (2 low)

## Privacy Concerns

### What Data is Collected

Spotify collects listening activity, usage patterns, and device identifiers to personalize the user experience and support service improvements. Firebase Analytics records which features users access and how frequently.

### Third-Party Data Sharing

Data is not shared with advertising networks. The following services receive limited technical information to support core functionality, crash reporting, and platform integration:

- Firebase Analytics
- Firebase Crashlytics
- Google Play Services
- Google Cast TV SDK

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 89/100 |
| Privacy | 99/100 |
| Data Security | 93/100 |
| Network Security | 96/100 |
| Code Safety | 97/100 |
| Data Collection | 99/100 |
| Data Sharing | 100/100 |
| User Control | 99/100 |

## Positive Security Features

No specific positive security practices were identified for this version.

## Areas for Improvement

- How some account data is stored on the device could be hardened to reduce risk if a device is lost or accessed by an unauthorized person.
- A few network connection settings could be tightened to better protect data as it travels between the device and Spotify's servers.
- Some minor configuration choices fall short of current best practices for TV app security.

---

## About This Analysis

Scores are generated through automated static analysis of the app's compiled code and configuration files. Results reflect the app's security and privacy posture at the time of the analysis.

### App Details

| Field | Value |
|---|---|
| Package | com.spotify.tv.android |
| Version | 1.123.3 (build 2230300) |
| Scan Date | 2026-03-05 |
| Platform | Android TV |