See the hidden trackers in your apps.

Powered by Lockdown

Trackers? All Reviews


Music and Podcasts

#1 in Music

iOS Review


Spotify is the most popular music app on the App Store. In July, due to their deep integration of the Facebook Tracking plug-in, millions of users were unable to launch or use Spotify because of a bug in the Facebook tracking code. We would have given Spotify a "D" due to this, but since they reduced their reliance on the Facebook plugin after this event, our rating is now a "C". Spotify still contains many popular trackers like Google Analytics, Branch, and Comscore.

The Facebook bug mentioned above did not affect users who used Lockdown, according to Business Insider.

Spotify's Privacy Rating is C. We found 4 different third-party trackers in the Spotify app, and there were 43 attempted tracking connections detected during our test.

Testing Results

Blocked tracking attempts.

How was tracker testing done?

Tested using Lockdown v1.1.7

What was done during the test?

43 total tracking attempts in <5 minutes of signing up for a new account using email, then tapping on a few podcasts and songs.

How many tracking attempts each time the app is opened?

8 new tracking attempts each time the app is opened.

Did user give consent to tracking before tracking started?

No. New app launch from fresh install contacts Branch, Adjust, and Google Analytics ( immediately, without user consent.

Any background tracking when app isn't open?

None observed.

Personal Data Collected
❗️ Notification
✉️ Email Address
🤦‍♀️ Facebook Connect
📅 Full Birthdate
❓ Gender
🙋‍♀️ Full Name
Trackers Found


Mobile measurement, linking platform

Privacy Policy: IP Address, Cookie, Link Data, User Agent, Referrer, Request, Phone Number, Engagement Data, iOS Identifier for Advertising, iOS Identifier for Vendors, Android Advertising ID, Android ID, Branch Cookie ID, App Version, Device model, Manufacturer, Operating system, Operating system version, Screen size, screen resolution, Session start/stop time, Mobile network status (WiFi, etc), Application installed time, Application updated time, Device locale (country and language), Local IP address, Mobile platform, Branch SDK version, Carrier ID, MAC address, Windows Advertising ID, CPU ID

Google Analytics



Measure Advertising ROI

Privacy Policy: Owned by Google, so same as Google's Privacy Policy. Personal information, email address, apps, browsers, devices, unique identifiers, browser type and settings, device type and settings, and too much more to fit here.



Mobile Marketing

Privacy Policy: hashed IP address, Mobile identifiers such as the ID for Advertising for iOS (IDFA), Google Advertising ID or similar mobile identifiers, Installation and first opening of an app on Your mobile device, Your interactions within an app (e.g. in-app purchases, registration), Information regarding which advertisements You have seen or clicked on



Market Research

Privacy Policy: online identifiers (e.g., cookie identifiers, other hardware or device identifiers, and IP addresses), and Internet or other electronic network activity including information about your browsing history, operating system, browser type, website preferences, your use of website or application (e.g., time accessed, duration of visit, etc.).

Please share this review if you found it useful!