Spotify Car Thing

❗Article Status Notice: This Article is a stub

Notice: This Article Requires Additional Expansion

---

This article is underdeveloped, and needs additional work to meet the wiki's Content Guidelines and be in line with our Mission Statement for comprehensive coverage of consumer protection issues. Issues may include:

• This article needs to be expanded to provide meaningful information
• This article requires additional verifiable evidence to demonstrate systemic impact
• More documentation is needed to establish how this reflects broader consumer protection concerns
• The connection between individual incidents and company-wide practices needs to be better established
• The article is simply too short, and lacks sufficient content

How You Can Help:

• Add documented examples with verifiable sources
• Provide evidence of similar incidents affecting other consumers
• Include relevant company policies or communications that demonstrate systemic practices
• Link to credible reporting that covers these issues
• Flesh out the article with relevant information

This notice will be removed once the article is sufficiently developed. Once you believe the article is ready to have its notice removed, visit the Discord (join here) and post to the #appeals channel, or mention its status on the article's talk page.

Basic Information
Release Year	2022
Product Type	Physical application extension
In Production	Discontinued, December 2024
Official Website	archive.org

The Spotify Car Thing was a physical device that allowed extended control of the Spotify app. When connected to a device running the Spotify app the Car Thing accesses an API for communication with the app, interacting with the Car Thing attempts to make API calls for interaction. Production of the Car Thing stopped The product ceased functioning on December 9th when the Car Thing API was shutdown, preventing the device from interacting with the Spotify app.

Consumer Impact Summary

User Freedom

• Freedom summary
  

User Privacy

• Privacy Summary
  

Consumer Protection Incidents

Production discontinued (July 27, 2022)

Production of the Car Thing is quietly halted due to poor sales .

Price reduced from $89.99 to $29.99 (August 20, 2022)

Spotify reduced the price by $60 in order to clear out their stock. The SCT would eventually sell out.

Root access in the SCT is cracked by Security researchers (October 20, 2022)

Root access was gained on the SCT through local means. While this is damning for the SCT's security it was not significant to consumer security, it merely gave consumers the ability to repurpose the device by uploading their own software. There is a risk that resold SCTs could contain malware but this is an unlikely target. Spotify's response to the exploit was "that the product is unsupported, and end-of-life, and therefore no bugs would be accepted pertaining to the product" which is actually the first time Spotify officially announced the discontinuation. The bypass guide is available [https://github.com/oddsolutions/superbird-bulkcmd

Total discontinuation announced (May 23, 2024)

Spotify official announces the Car Thing's discontinuation on their website warning users that it will cease functioning entirely after December 9th, effectively (LINK) discontinuation bricking the device.

SCT API is shut down and removed from the Spotify App (December 9, 2024)

The removal of the Spotify Car Thing API completely bricked all Car Things in distribution.

References

https://www.digitalmusicnews.com/2024/06/02/how-long-did-spotify-car-thing-last-timeline/