A Listening in the dark? Why you should be concerned about the privacy risks on Spotify

When it comes to our online accounts, you may be aware of being private on platforms such as Facebook and Instagram. But have you ever considered Spotify? George Santos, that Republican senator that stole money from homeless veterans dying dogs with a fake nonprofit, likely didn't, but he does now!

What we can learn about privacy from Santos

As The Daily Beast uncovered in an investigation in January, Santos appears to have a particular taste for Brazilian club music and singles by the fantastical Rupaul. While nothing scandalous, after The Daily Beast reached out for comment. Within hours, the username was changed from “Mr Dee” to “ABC123”. Extremely subtle and definitely not inconspicuous at all to whom the true account holder may be.

Unfortunately for Mr Santos, the username was not what connected him to the account. This connection was made through his current partner's Spotify account, which was easily found through a Google search. The partner had previously followed "ABC123," but has since unfollowed him. However, they still have a shared playlist named "Matt."

It's worth noting that Santos only followed three people on Spotify, including David Guetta, "Mr Dee," and a friend. While Santos's interests and relationships may not be surprising, this investigation highlights the potential for Spotify to reveal a wealth of information about its users.

Take your own account, for example.

Do you use a pseudonym or your full name? If using a pseudonym, is it a username that you use on other platforms as well? Someone can search for you via your profile and find your account that way.

How about your friends? Who are you following on Spotify, and who follows you? It's likely that your followers are people that are close to you rather than acquaintances you met a few years ago and shared Instagram handles with.

Do you have a shared playlist or blend with your close friends or partner? Consider privatizing them on your profile. It’s easy to track and trace down who you may consider your closest friends and family when you have a shared music playlist when.

Let's say you enjoy making playlists before every holiday you go on. With names such as Bali Trip June 2025! Now someone can figure out where and when you are going away on holiday. Perhaps you add to a specific playlist called “You broke my heart” every time you go through a breakup. Or consider if you create playlists for a partner, a sudden disappearance in all of them will also suggest the latter.

Remember, every time you add a song to the playlist, Spotify tracks and displays the date. It’s easy to figure out what a person's relationship timeline may look like through this.

How can you lockdown?

Easiest way? Do not use your full name as your Spotify username. This is probably the easiest way someone can find your profile. You may want to consider using a completely unique username rather than one you use across platforms.

Turn off showing your recently played artists, and don't share your listening status with your followers. Or check who follows you. Do you know everyone? Consider taking off all your playlists from your profile. You will still have access to them, but friends and strangers won't be able to see them. If you wish to share them, send them a share link so that they can view them.

Hide your following and follower list. Depending on if your followers or followers do the same or not, however, someone may still be able to find your profile through following lists.

Note whether or not you choose to follow the following steps is to your own preference and the level of privacy you wish to take. However, it's good, regardless of your privacy risk tolerance, that you are aware of what someone can find out about you through your Spotify account.