According to the apology post, attributed to CEO Daniel Ek, Spotify is 100 per cent committed to user privacy and ensuring people have full control over their own data.
"We should have done a better job in communicating what these policies mean and how any information you choose to share will – and will not – be used,” says Ek.
Apparently you don't have to let it access all of your data, because it asks for your express permission before it dives into it. Spotify also won't be sharing any data it collects without 'de-identifying' it first.
It's not entirely clear what that means from the wording, though. Android users will know that they have to universally accept all permissions before downloading an app – so that probably counts these days as asking for someone's "express permission"?
Whatever the reason, Spotify also wants to make it clear that these permissions can be revoked at any time you see fit. How that'll happen isn't entirely clear. Unlike iOS, Android and Windows Phone users currently don't have the luxury of being able to customise permissions in the settings menu.