There's an interesting comment about "passing information back to record labels" especially given: "It was stated that the labels own 30 per cent of Spotify through equity investments. It may be higher."
I'm not implying it's some big conspiracy, just that keeping user data private when you're (part) owned by the companies a lot of your users are scared of is _hard_.