Consumer Rights Wiki

Spotify Car Thing: Difference between revisions

← Older edit
VisualWikitext
m minor tweaks
→See also: added a similar case of 'discontinuation bricking`' or 'app-dependent hardware'
 
(19 intermediate revisions by 12 users not shown)
Line 1: Line 1:
{{StubNotice}}
{{StubNotice}}
{{ProductCargo
|Company=Spotify
|ReleaseYear=2022
|InProduction=No
|ArticleType=Product
|Category=Media player
|Logo=Spotify car thing promotional image.png
|Website=https://carthing.spotify.com,https://support.spotify.com/us/article/car-thing-discontinued
|Description=A physical application extension of the Spotify mobile app for older cars. In 2024, Spotify discontinued support, which rendered all devices unusable.
}}
The '''Spotify Car Thing''' was a physical device that allowed extended control of the [[Spotify]] app. When connected to a device running the Spotify app, the Car Thing accesses an {{Wplink|API}} for communication with the app, interacting with the Car Thing attempts to make API calls for interaction. Production of the Car Thing stopped July 2022. The product ceased functioning on 9 December 2024, when the Car Thing API was shutdown and thus preventing the device from interacting with the Spotify app.
==Consumer impact summary==
*'''Revocation of control:''' The [[discontinuation bricking]] of the device ultimately took away user control for thousands of people. Control was only regained after [[Security|security vulnerabilities]] in the device were exploited.
*'''Always online:''' The Car Thing's dependence on the Spotify app required that a phone authorized with the Spotify app always be present and connected to the Car Thing. The Car Thing's lack of offline support [[Forced app download|forced]] the user to use an app possibly unnecessarily.
*'''Retroactive resale falsification:''' The discontinuation bricking incident has created some potential risk for reseller [[false advertising]].
*'''Data collection:''' Spotify openly admitted that the Car Thing had been developed to collect data on "how people listen to music and podcasts".<ref>{{Cite web |author= |title=5 Things to Know about Spotify’s Latest Test |url=https://newsroom.spotify.com/2019-05-17/5-things-to-know-about-spotifys-latest-test/ |website=[[Spotify]] |date=17 May 2019 |access-date=12 Mar 2026 |url-status=live |archive-url=https://web.archive.org/web/20250129004743/https://newsroom.spotify.com/2019-05-17/5-things-to-know-about-spotifys-latest-test/ |archive-date=29 Jan 2025}}</ref> How the data collected through the SCT is useful for this purpose is unclear, in addition it is also unclear what the data is.
*'''Security concerns:''' The root access exploit, while beneficial to user freedom in allowing them to {{Wplink|Privilege escalation#Jailbreaking|jailbreak}} their device, also raises some concerns for future buyers of jailbroken Car Things — a malicious seller could upload malware onto the device — resold SCTs may be a potential security risk.
==Incidents==
This is a list of all consumer-protection incidents related to this product. Any incidents not mentioned here can be found in the [[:Category:{{PAGENAME}}|{{PAGENAME}} category]].


{{SecondProductPage
===Production ended (''July 2022'')===
|infobox_logo=spotify_car_thing.png
On 27 July 2022, Spotify ended production of the Car Thing but did not share the news until 3 August.<ref name="timeline">{{Cite web |last=King |first=Ashley |title=Spotify’s Sordid Car Thing History—Here’s a Timeline of the Disastrous Hardware Release |url=https://www.digitalmusicnews.com/2024/06/02/how-long-did-spotify-car-thing-last-timeline/ |website=Digital Music News |date=2 Jun 2024 |access-date=12 Mar 2026 |url-status=live |archive-url=https://web.archive.org/web/20240603042155/https://www.digitalmusicnews.com/2024/06/02/how-long-did-spotify-car-thing-last-timeline/ |archive-date=3 Jun 2024}}</ref> The company cited poor sales.<ref>{{Cite web |last=King |first=Ashley |title=Spotify’s Car Thing History—A Quick Peek at the Timeline |url=https://www.digitalmusicnews.com/2022/08/03/what-happened-to-spotify-car-thing/ |website=Digital Music News |date=2 June 2024 |access-date=12 Mar 2026 |url-status=live |archive-url=https://web.archive.org/web/20220806021216/https://www.digitalmusicnews.com/2022/08/03/what-happened-to-spotify-car-thing/ |archive-date=6 Aug 2022}}</ref> Following the end of production, the company reduced the price from $89.99 to $29.99 on 20 August 2022 in order to clear out their stock. The Spotify Car Thing would eventually become sold out, exposing even more customers to its discontinuation.<ref name="timeline" />
|infobox_release_year=2022
|infobox_product_type=Physical application extension
|infobox_in_production=Discontinued, December 2024
|infobox_website=[https://web.archive.org/web/20250127021601/https://carthing.spotify.com/&#124;archive.org archive.org]
|description=The Spotify Car Thing was a physical device that allowed extended control of the Spotify app. When connected to a device running the Spotify app the Car Thing accesses an API for communication with the app, interacting with the Car Thing attempts to make API calls for interaction. Production of the Car Thing stopped July of 2022. The product ceased functioning on December 9th 2024 when the Car Thing API was shutdown, preventing the device from interacting with the Spotify app.
|summary_1_1=
'''Revocation of control''' - the [[Self-destructive design|discontinuation bricking]] of the device ultimately took away user control for thousands of people. Control was only regained after [[Security|security vulnerabilities]] in the device were exploited.
* '''Dependence on a phone app for basic functions''' - the Car Thing dependence on the Spotify app required that a phone authorized with the Spotify app always be present and connected to the Car Thing. The car thing's lack of offline support [[Forced app download|forced]] the user to use an app possibly unnecessarily.
* '''Retroactive resale falsification''' - the discontinuation bricking incident has created some potential risk for reseller false advertising which has been documented [[False advertising|here]].
|summary_2_1=
'''Data collection''' - Spotify openly admitted that the Car Thing had been developed to collect data on "how people listen to music and podcasts".<ref>[https://web.archive.org/web/20250129004743/https://newsroom.spotify.com/2019-05-17/5-things-to-know-about-spotifys-latest-test/ "5 Things to Know about Spotify’s Latest Test"] - archive.org - archived 2025-01-28</ref> How the data collected through the SCT is useful for this purpose is unclear, in addition it is also unclear what the data is.
* '''Security Concerns''' - The root access exploit<ref name=":1" /> while beneficial to user freedom, allowing them to [[jailbreak]] their device also raises some concerns for future buyers of jailbroken Car Things -- a malicious seller could upload malware onto the device -- resold SCTs may be a potential security risk.


|incidents_1_title=Production discontinued<ref name=":0">[https://archive.is/9F9Jk "Spotify’s Sordid Car Thing History—Here’s a Timeline of the Disastrous Hardware Release"] - archive.is - archived 2025-01-28</ref>
===Root access cracked by security researchers (''October 2022'')===
|incidents_1_date=July 27, 2022
On 20 October 2022, security researchers cracked the root access through local means.<ref>{{Cite web |last=Johnson |first=Nolen |title=Spotify Car Thing - Root and Custom OS toolkit |url=https://oddsolutions.github.io/Spotify-Car-Thing-Root/ |website=ODS Security Research |date= |access-date=12 Mar 2026 |url-status=live |archive-url=https://web.archive.org/web/20240523195007/https://oddsolutions.github.io/Spotify-Car-Thing-Root/ |archive-date=23 May 2024}}</ref> While this can be seen as a large issue for the product's security, it was not significant to customer security, instead giving customers the ability to repurpose the device by uploading their own software. There is a risk that resold jailbroken Car Things could contain malware but this is an unlikely target. Spotify's response to the exploit was "that the product is unsupported, and end-of-life, and therefore no bugs would be accepted pertaining to the product",<ref name="timeline" /> which would mark the first time Spotify officially announced the discontinuation.
|incidents_1_text=Production of the Car Thing is quietly halted due to poor sales.<ref>[https://archive.is/Lodo1 "What Happened to Spotify’s Car Thing? Spotify Exits Hardware"] - archive.is - archived 2025-01-28</ref>
 
|incidents_2_title=Price reduced from $89.99 to $29.99<ref name=":0" />
===Complete discontinuation announced (''May 2024'')===
|incidents_2_date=August 20, 2022
Spotify officially announced the Car Thing's discontinuation on their website on 23 May 2024, warning users that it would cease functioning entirely after 9 December 2024 (effectively bricking the device).<ref>{{Cite web |author= |title=Car Thing discontinued |url=https://support.spotify.com/us/article/car-thing-discontinued/ |website=[[Spotify]] |date= |access-date=12 Mar 2026 |url-status=live |archive-url=https://web.archive.org/web/20250128235625/https://support.spotify.com/us/article/car-thing-discontinued/ |archive-date=28 Jan 2025}}</ref><ref name="timeline" /> The resulting customer backlash led to Spotify instituting a refund process specifically for owners of the product.<ref>{{Cite web |last=Gallaga |first=Omar |title=Here's How to Get a Refund if You Bought Spotify's Failed Car Thing Device |url=https://www.cnet.com/roadshow/news/heres-how-to-get-a-refund-if-you-bought-spotifys-failed-car-thing-device/ |website=CNet |date=31 May 2024 |access-date=12 Mar 2026 |url-status=live |archive-url=https://megalodon.jp/2026-0313-1105-07/https://www.cnet.com:443/roadshow/news/heres-how-to-get-a-refund-if-you-bought-spotifys-failed-car-thing-device/ |archive-date=13 Mar 2026}}</ref>
|incidents_2_text=Spotify reduced the price by $60 in order to clear out their stock. The SCT would eventually sold out exposing more consumers to its discontinuation.
 
|incidents_3_title=Root access in the SCT is cracked by Security researchers<ref name=":0" />
===Class-action lawsuit against Spotify (''May 2024'')===
|incidents_3_date=October 20, 2022
Spotify was served a [[class-action lawsuit]] in the U.S. District Court for the Southern District of New York on 28 May 2024. The lawsuit claimed "Spotify misled consumers by selling them a soon-to-be obsolete product and then not offering refunds, reports Billboard".<ref>{{Cite web |last=Perez |first=Sarah |title=Spotify Faces Class Action Lawsuit Over ‘Car Thing’ Deactivation: ‘A Useless Product’ |url=https://techcrunch.com/2024/05/30/spotify-begins-offering-car-thing-refunds-as-it-faces-lawsuit-over-bricking-the-streaming-device/ |website=TechCrunch |date=30 May 2024 |access-date=12 Mar 2026 |url-status=live |archive-url=https://web.archive.org/web/20250129011219/https://techcrunch.com/2024/05/30/spotify-begins-offering-car-thing-refunds-as-it-faces-lawsuit-over-bricking-the-streaming-device/ |archive-date=29 Jan 2025}}</ref> Prior to the lawsuit's filing, Spotify had set up a refund page for buyers through e-mail which directs customers to [https://support.spotify.com/us/contact-spotify-support/ this link], where customers can receive a refund with proof of purchase (excluding resales). The lawsuit was dismissed by the plaintiffs after Spotify began issuing refunds.<ref>{{Cite web |last=Smith |first=Dylan |title=‘Car Thing’ Class Action Lawsuit Voluntarily Dismissed After Spotify Begins Issuing Refunds |url=https://www.digitalmusicnews.com/2024/07/10/spotify-car-thing-lawsuit-dismissed/ |website=Digital Music News |date=10 Jul 2024 |access-date=12 Mar 2026 |url-status=live |archive-url=https://web.archive.org/web/20240721014704/https://www.digitalmusicnews.com/2024/07/10/spotify-car-thing-lawsuit-dismissed/ |archive-date=21 Jul 2024}}</ref>
|incidents_3_text=Root access was gained on the SCT through local means.<ref name=":1">[https://archive.is/WFjUd "Spotify Car Thing - Root and Custom OS toolkit"] - archive.is - accessed 2025-01-28</ref> While this is damning for the SCT's security it was not significant to consumer security, it merely gave consumers the ability to repurpose the device by uploading their own software. There is a risk that resold jailbroken SCTs could contain malware but this is an unlikely target. Spotify's response to the exploit was "that the product is unsupported, and end-of-life, and therefore no bugs would be accepted pertaining to the product" <ref name=":1" /> which is actually the first time Spotify officially announced the discontinuation. The bypass guide is available [https://github.com/oddsolutions/superbird-bulkcmd here]
 
|incidents_4_title=Total discontinuation announced<ref name=":2" />
==See also==
|incidents_4_date=May 23, 2024
 
|incidents_4_text=Spotify official announces the Car Thing's discontinuation on their website warning users that it will cease functioning entirely after December 9th, effectively discontinuation bricking] the device. <ref name=":2">[https://web.archive.org/web/20250128235625/https://support.spotify.com/us/article/car-thing-discontinued/ | "Car Thing discontinued"] - archive.org - archived 2025-01-28</ref> The announcement created a large scale panic with Car Thing owners who had actually enjoyed their product and were disappointed in the future bricking incident.<ref name=":3" />
* '''Pencil by FiftyThree''' (2013–2019) was a Bluetooth active stylus sold by FiftyThree, Inc., designed to work with their Paper drawing app for iPad. Its key features — palm rejection, eraser, and Blend — relied entirely on Bluetooth integration with the Paper app via a proprietary SDK. FiftyThree discontinued its hardware business in 2016, and was acquired by [[WeTransfer]] in August 2018. In 2019, WeTransfer discontinued support for the Pencil in the Paper app, reducing the device to a basic passive stylus. The device's active features were never recoverable through third-party means. This is an early example of active hardware rendered functionally downgraded by a software decision made after purchase, without recourse for the consumer.
|incidents_5_title=A now dismissed class action lawsuit is filed against Spotify<ref name=":3">[https://web.archive.org/web/20250129011219/https://techcrunch.com/2024/05/30/spotify-begins-offering-car-thing-refunds-as-it-faces-lawsuit-over-bricking-the-streaming-device/ "Spotify Faces Class Action Lawsuit Over ‘Car Thing’ Deactivation: ‘A Useless Product’"] - archive.org - archived 2025-01-28</ref>
 
|incidents_5_date=May 28, 2024
==References==
|incidents_5_text=Spotify was served a [[Class-action lawsuit|class-action lawsuit]] in the U.S. District Court for the Southern District of New York. The lawsuit claimed "Spotify misled consumers by selling them a soon-to-be obsolete product and then not offering refunds, reports Billboard".<ref name=":3" /> Prior to the lawsuit's filing Spotify had setup a refund page for buyers through email which directs customers to [https://support.spotify.com/us/contact-spotify-support/ this link], customers can receive refund with proof of purchase.<ref name=":3" /> The lawsuit was dismissed by the plaintiffs after Spotify began issuing refunds<ref>[https://archive.is/pwsVe "‘Car Thing’ Class Action Lawsuit Voluntarily Dismissed After Spotify Begins Issuing Refunds"] - archive.is - archived 2025-01-28</ref>.
{{Reflist}}
|incidents_6_title=SCT API is shut down and removed from the Spotify App<ref name=":0" />
 
|incidents_6_date=December 9, 2024
[[Category:{{PAGENAME}}]]
|incidents_6_text=The removal of the Spotify Car Thing API completely bricked all Car Things in distribution.
[[Category:Spotify]]
}}
[[Category:Products]]
[[Category:Products]]
Retrieved from "https://consumerrights.wiki/w/Spotify_Car_Thing"