Audiomack

Is Audiomack safe?

Audiomack is safe to install and use, with one clear trade-off: the free tier pays artists with targeted ads, and the app collects a lot to target them. We found no breach, no fine and no regulator case against the company. We score it 54/100, level with SoundCloud (54), which had a breach in 2025, and below Spotify (57).

The service is built for discovery. Anyone can upload songs, mixtapes and podcasts, and Audiomack says hosting is free with no paid creator tiers. That openness is also where the content and copyright problems come from.

How much Audiomack tracks

Apple's privacy label is long. Eight categories of data may be used to track you across other companies' apps and websites: purchases, location, contact info, user content, search history, identifiers, usage data and diagnostics. Under third-party advertising, the data linked to you includes precise and coarse location, your email address, device ID and advertising data.

The privacy policy, effective 23 December 2020, opens with a "User Bill of Rights" that promises minimal collection and no sale of data. Read further and the picture is more mixed. Audiomack sends advertisers your phone's advertising ID, the genre you are listening to and your location "to ensure ads reach a user in the correct country and city". It shares a hashed email address and IP address with LiveRamp, an identity company, which returns a code used for "online, in-app, and cross-channel advertising". Partners may link that to your browser or TV to recognise you across devices. The policy says Audiomack does not respond to Do Not Track signals but does respect iPhone ad-tracking limits.

Google Play's data safety section tells the same story: approximate location is shared for advertising, and the app collects a list of installed apps for advertising and personalisation. A policy that has not been updated in nearly six years, for an app that has since added creator messaging and monetisation, is a weak point in itself.

Accounts and security

We found no breach of Audiomack in Have I Been Pwned or in news coverage. Data is encrypted in transit, according to Google Play.

Login is the weak part. Accounts use an email and password or sign-in through Google, Facebook, Twitter (X) or Apple, and Audiomack's login help mentions no two-step option. If you sign up with email, a password reused from another site is the easiest way in for an attacker. Signing in with Apple or Google gives you that provider's two-step protection instead.

Audiomack runs a responsible disclosure policy for security researchers, with payment "at Audiomack's discretion", and a separate bug programme for ordinary users that rewards reports with a month of Premium or a $25 gift card. That is better than nothing but well short of the paid bounty programmes run by Spotify or Apple.

Uploads, comments and messages

Most risk on Audiomack comes from its open upload model. Tracks go live without review, so explicit lyrics, unlicensed remixes and misleading uploads appear alongside licensed music, and the App Store rating of 13+ cites user-generated content. Public comments sit under tracks.

There is less room for direct contact than on SoundCloud. Listeners cannot message each other privately; verified artists can send updates to their followers through a feature called Connect, and fans reply in comments. Treat any "promotion" offer that arrives through comments or email with care. Audiomack’s policy says it can remove content used to manipulate its charts or play counts, so bought plays can cost an artist their uploads.

How to use Audiomack more safely

1. Sign in with Apple or Google rather than a new password, so the account sits behind two-step login.
2. On iPhone, tap Ask App Not to Track when prompted, or turn off tracking for Audiomack in Settings.
3. On Android, delete your advertising ID or turn off ad personalisation in your Google settings.
4. Deny location access. Audiomack still works, and ads fall back to your IP address region.
5. Remember that plays, favourites and playlists on your profile are public; keep personal details out of your bio.

How we scored it

Privacy (35) is the weakest factor because location and identifiers are used for third-party ad tracking and hashed emails go to an identity broker. Security (55) reflects a clean breach record held back by no two-step login and only discretionary bug rewards. Scams and harmful content (62) sits above SoundCloud's because there are no open private messages. The regulatory record (86) is clean, but no large regulator has examined the app.