I'm not sure I understand what's happening here. If the apps (desktop and mobile) ever asked for access to other data (I don't recall that they have), I've told them no. I just checked all my settings and if my OS isn't lying to me, Spotify doesn't have access to my location, my photos, nor my contacts.

Now, I'm not happy that they'd even ask. But the service doesn't stop working when I deny access. Since the change in TOS, the apps didn't ask again.

I do, however, think any companies wanting access to data outside what I feel is the app's purview should really stop couching their use in Marketing Speak ("We use this data to improve our service, let you discover content also consumed by your acquaintances...") and be more informative about where the data goes.