3 ms·

It’s helpful so Spotify can start playing music when I connect my headphones, or so apps like Bose Connect can update my headphones. Most features with privacy

It’s helpful so Spotify can start playing music when I connect my headphones, or so apps like Bose Connect can update my headphones. Most features with privacy implications are also features that can add a ton of value if used correctly. The problem is partially the lack of system messaging and partially lack of morals...

ascagnel_ 7y ago
Spotify shouldn’t need BT access to play audio —- there’s a “blessed” API for apps that need BT audio output that won’t require separate authorization. Your headphone update app more reasonably will need that permission, as its doing more than audio output.
- lstamour 7y ago
  You misunderstand, it’s not for playing back audio as such, it’s for detecting when the headphones connect as well as (maybe?) enabling easy set up of speakers with Spotify Connect. Similarly Dropcam had a setup mode via Bluetooth, Google Home as well.
  - fluffything 7y ago
    Spotify doesn't care whether your headphones are BT or not. iOS should be doing audio device discovery and notifying the apps that request it when a new device is found. Whether you plug some headphones or use bluetooth or airplay or ... shouldn't matter here.
    - lstamour 7y ago
      Apple does do device discovery, but it then lets the app show the device names, in fact it’s a requirement to play audio over Bluetooth and a key usability feature of wireless headphones. If your music app doesn’t tell you which device is connected, you’d potentially be surprised every time you hit the Play button. So I’m 99% sure that Apple outright rejects apps that don’t say if you’re connected to Bluetooth, just as they reject apps that don’t say if you’re online. Bluetooth is also disabled for security purposes (if checked in settings) when the phone is locked, including previously paired devices, so it looks to me like they draw the line between security and privacy pretty well, short of forcing all apps to use the same UI conventions.
      - ascagnel_ 7y ago
        That’s 100% on Spotify and how they’re implementing playback. I have Sonos speakers and Bluetooth headphones paired with my iPhone, and Overcast is able to display the selected output without any Bluetooth permission requests. Spotify Connect is likely why they need a permission request... but the question for me is why they need it on app startup and not a one-time request when starting the Connect pairing process. Good security procedures would have the app requesting as few permissions as possible, for the shortest amount of time.
        lstamour 7y ago
        Again, all I can point to are the instances where I was playing music via Spotify on my Alexa devices and thanks to Spotify connect when I connect my headphones, Spotify starts playing automatically on my headphones. The downside is that occasionally Overcast stops playing because Spotify wants so much to take over and start playing. But it’s hard to say if that’s an iOS beta thing. Similarly, the app still ships for iOS 12 right now, it’s possible the iOS 13 version of the app will have a clearer explanation for the use of Bluetooth.

ascagnel_ 7y ago

Spotify shouldn’t need BT access to play audio —- there’s a “blessed” API for apps that need BT audio output that won’t require separate authorization. Your headphone update app more reasonably will need that permission, as its doing more than audio output.

lstamour 7y ago
You misunderstand, it’s not for playing back audio as such, it’s for detecting when the headphones connect as well as (maybe?) enabling easy set up of speakers with Spotify Connect. Similarly Dropcam had a setup mode via Bluetooth, Google Home as well.
- fluffything 7y ago
  Spotify doesn't care whether your headphones are BT or not. iOS should be doing audio device discovery and notifying the apps that request it when a new device is found. Whether you plug some headphones or use bluetooth or airplay or ... shouldn't matter here.
  - lstamour 7y ago
    Apple does do device discovery, but it then lets the app show the device names, in fact it’s a requirement to play audio over Bluetooth and a key usability feature of wireless headphones. If your music app doesn’t tell you which device is connected, you’d potentially be surprised every time you hit the Play button. So I’m 99% sure that Apple outright rejects apps that don’t say if you’re connected to Bluetooth, just as they reject apps that don’t say if you’re online. Bluetooth is also disabled for security purposes (if checked in settings) when the phone is locked, including previously paired devices, so it looks to me like they draw the line between security and privacy pretty well, short of forcing all apps to use the same UI conventions.
    - ascagnel_ 7y ago
      That’s 100% on Spotify and how they’re implementing playback. I have Sonos speakers and Bluetooth headphones paired with my iPhone, and Overcast is able to display the selected output without any Bluetooth permission requests. Spotify Connect is likely why they need a permission request... but the question for me is why they need it on app startup and not a one-time request when starting the Connect pairing process. Good security procedures would have the app requesting as few permissions as possible, for the shortest amount of time.
      - lstamour 7y ago
        Again, all I can point to are the instances where I was playing music via Spotify on my Alexa devices and thanks to Spotify connect when I connect my headphones, Spotify starts playing automatically on my headphones. The downside is that occasionally Overcast stops playing because Spotify wants so much to take over and start playing. But it’s hard to say if that’s an iOS beta thing. Similarly, the app still ships for iOS 12 right now, it’s possible the iOS 13 version of the app will have a clearer explanation for the use of Bluetooth.