What grand times we live in, where you can actually get this kind of data from the services that you use.

Having the law say your personal data is owned by you and not some company just because it's on their server may turn out to be a landmark in consumer friendly legislation!

I enjoy the mental exercise of finding where boundaries lie.

For instance, if you simply observe the actions people take when they talk to you, that's obviously your observation. If you were to, say, journal it, it's still yours. It's a weird thing to do, but it's yours.

If you used the journal to optimize yourself, perhaps to make conversation with you more enjoyable, again, that's weird, but perhaps also merely a paper version of what already goes on inside your head.

What if talking to you were really enjoyable, so that while people could technically avoid it, they usually didn't want to?

At what magnitude does the volume of people you're observing reach a scale where the people you're observing start to believe your observations are theirs?

Impressive-- https://twitter.com/steipete/status/1025029133175336960

"They even store the brand of headphone I use. How do you even get that data, digging deep in CoreBluetooth?"

It's kind of weird (and worrying tbh) that the user doesn't get _all_ the data by default. Shouldn't all the data be sent upon request, is there a clause saying 'only after nagging the TRUE data will be sent?

Here is a template for whoever else wants to request their data:

https://www.dropbox.com/s/fx5yyrru1uvx6no/sarletter.txt?dl=0

Source (@mikarv on Twitter):

https://twitter.com/mikarv/status/1012386696934182912?ref_sr...

If Spotify didn't give you all data with your first request I guess that they are in breach of GDPR?

Has anyone tried this request in the US? I'm assuming they would just tell you to politely shove it?

Remember all of the data Winamp2 used to gather and send to third-party servers?

While this is an extreme example, I'm not the least bit concerned about Spotify collecting this data. This data is likely used by Spotify to understand user behavior to improve user experience and improve their recommendation engine, or to simply understand how users interact with the app. I was delighted to find that Spotify sends you concert notifications of bands that I listened to the most. Personally, as long as they are not sharing this data with others without my permission they can collect this info. All of this is clearly stated in their privacy policy including the bit about Bluetooth) https://www.spotify.com/is/legal/privacy-policy-update/#s5.

I have a friend that always used to joke that if Spotify ever failed and got sold off to private equity, they would shift to a business model where they mine for embarrassing music and behaviors and then extort people to keep quiet about it.

I'd be interested in knowing if he is a paid subscriber or not.

I understand that Spotify needs data to power Discover Weekly, but I'm not sure I'm comfortable with this amount of data.

This is great. I wonder if the EU can write a law to allow us to see what adverts are being served to which audiences on platforms like Facebook and Google. More transparency please.

> Having the law say your personal data is owned by you and not some company just because it's on their server may turn out to be a landmark in consumer friendly legislation!

It's interesting to think where this goes in the future. Can I demand my purchase history from physical McDonalds restaurants at some point? Why limit it to internet-related interactions? (Or maybe this is already included in GDPR and I'm just not aware?)

The main issue as i see it is that he did not get data when he asked. He had to complain.

Man I was comfortable running spotify as the only non-free app on my Linux machines, now I'm not.

It's back to ocp and mods/classical music/occasional purchased for me I guess... (except on my phone of course which is a lost cause)

Is this data collected by Spotify, or __all__ data Spotify has for a user? That is, it's certainly possible for any given service to gather / aggregate data from sources other than itself.

Has someone started a list of GDPR data export requests and their results? I wonder what interesting information is out there...

Seems like CSV would've been a better format than JSON for this type of data based on the screenshots.

OK, I’ve been wondering if I could get this data. Now I want mine.

If something is free, you are the product being sold...

Meh you are the product spotify is free!

Confusing title. I thought there was some horrible bug that sent a 250MB file every time you clicked something! After reading the tweet I realize it’s saying the 250MB file contains every interaction.

Instead of "with", please use "containing" in the title.