Skip to content
SafetyScorer

Is Deezer safe?

Deezer

Deezer is a low-risk app to listen to music, with almost no contact with strangers. The weak points are data. A former advertising contractor kept and then leaked a 2019 copy of Deezer's user records, free accounts are profiled for third-party ads, and there is no two-step login.

Medium confidence#30 of 78 in Streaming, music and games
Updated
Spot a mistake?

#30of 78 in Streaming, music and games

Medium confidence
Agree with our score?
Company
Deezer SA, Paris
App Store label
Email address and device ID used to track you
2022 leak
229 million email addresses from a 2019 copy held by a former contractor (Have I Been Pwned)
CNIL fine
€1 million on the contractor, Mobius Solutions (December 2025); Deezer itself not fined
Two-step login
None found; email codes only for email and password changes
Free tier
Ads, profiled with your consent in cookie settings
Age rating
13+ (App Store); kid profiles in Deezer Family

How the score breaks down

The overall score is the weighted average of these factors. Scoring rules

  • Privacy30% of score

    45 out of 100, Weak

    Apple's label lists email address and device ID as used to track you, and coarse location, IDs and ad data linked to you for third-party ads. Deezer's policy says free users get an ad profile, built with cookie consent, for third-party ads.

  • Security30% of score

    45 out of 100, Weak

    A 2019 copy of Deezer data kept by a former contractor leaked in 2022, exposing 229 million email addresses with names, dates of birth and locations (Have I Been Pwned). No passwords leaked, but Deezer has no two-step login.

  • Transparency and control15% of score

    65 out of 100, Fair

    Data export and account deletion are in account settings, with the export file sent after about 7 days. The privacy policy, last revised in December 2021, sets out data by purpose and keeps most data for 3 years after your last use.

  • Scams and harmful content15% of score

    80 out of 100, Good

    Content is licensed music, podcasts and radio, with no open messaging. All explicit content is allowed by default, but a filter can hide it and Deezer Family has kid profiles. The App Store rates the app 13+.

  • Regulatory record10% of score

    86 out of 100, Excellent

    No fine or order names Deezer as the party at fault. In December 2025 France's CNIL fined Deezer's former contractor Mobius Solutions €1 million for keeping and misusing the data of over 46 million Deezer users after their contract ended.

Is Deezer safe?

For listening, yes. Deezer streams licensed music, podcasts and radio, and has no open messaging, so there is little for a scammer or stranger to use against you inside the app. We score it 57/100, level with Spotify and well below Apple Music (78).

The weak points are data and accounts. A contractor that Deezer stopped using in 2020 kept a copy of its user records, which leaked in 2022. Free accounts are profiled for third-party ads. And there is no two-step login.

What happened in the 2022 leak

In November 2022 Deezer learned that a data set from its former advertising contractor had appeared online. Deezer says it used the provider until 2020, that the provider confirmed in 2020 that the data had been destroyed, and that it had not. The copy dates from 2019 and was sold, then shared widely on a hacking forum.

Have I Been Pwned lists 229 million unique email addresses from the leak, with names, usernames, dates of birth, gender, IP addresses and the city or country of each user. Deezer says no passwords or payment details were included and that its own systems were not affected.

France's data protection authority, the CNIL, investigated after Deezer reported the leak. On 11 December 2025 it fined the contractor, Mobius Solutions Ltd, €1 million. The CNIL found that Mobius kept the data of more than 46 million Deezer users after the contract ended, and used it to improve its own platform for personalised advertising without any instruction from Deezer. Mobius said three employees had copied the data without its knowledge; the CNIL held the company responsible anyway. Deezer itself was not fined.

That matters for the score in two ways. The leak still counts against security, because Deezer's users were exposed and the data is the kind scammers use for convincing phishing. The fine does not count against Deezer's regulatory record, because the CNIL faulted the contractor, not Deezer.

What Deezer collects for ads

Apple's label lists email address and device ID as data used to track you across other companies' apps and websites. Coarse location, user and device IDs, product interaction and advertising data are linked to you for third-party advertising. On Android, Google Play says device IDs and email addresses are shared with other companies for analytics and marketing.

Deezer's privacy policy is more specific. If you use the free tier, Deezer builds an advertising profile from your age, gender, IDs, coarse location and listening activity, and uses it to show third-party ads in its apps. You can refuse this in the cookie settings, and then see less targeted ads. Paying subscribers are not shown third-party ads, but Deezer uses their profiles to find similar people for its own ad campaigns. The policy also says Deezer shares some data with partners such as telecom operators, retailers and labels that sell Deezer bundles.

Most data is kept for 3 years after your last activity, support requests for 5 years and payment records for 10 years under French law. The policy we read was last revised in December 2021.

How to protect your Deezer account

Deezer offers no authenticator app, text code or PasskeyA way to sign in without a password. Your device holds a key tied to one website or app and unlocks it with your fingerprint, face or PIN.More in the glossary at login, so the password is your only lock. It does send a six-digit code to your email before anyone can change the email address or password, which slows down a takeover. Deezer runs a vulnerability disclosure page for security researchers.

  1. Check your email on Have I Been Pwned. If it appears in the Deezer leak, expect phishing that uses your real name and birth date.
  2. Use a unique password for Deezer, and turn on two-step login for the email account linked to it.
  3. On the free tier, open the cookie settings and refuse ad personalisation if you do not want an ad profile.
  4. Request your data in account settings to see what Deezer holds; the download link arrives after about 7 days.
  5. Delete the account in settings if you stop using it, so another leaked copy holds less of you.

Is Deezer safe for children?

The catalogue is licensed music and podcasts, and there is no way for strangers to message a child. The catch is the default: all explicit tracks and cover art play unless you change it. The filter in the app's settings can hide explicit content from search, Flow and recommendations, and Deezer Family plans include kid profiles. The App Store rates the app 13+.

How we scored it

Scams and harmful content (80) and the regulatory record (86) are Deezer's strongest factors: licensed content, no chat, and no fine naming Deezer as at fault. Privacy (45) reflects ad profiling and tracking on the free tier. Security (45) is weighed down by the 229 million records from the contractor leak and the lack of two-step login. For an ad-free option with stronger login, see Tidal.

Questions people ask

Was Deezer hacked?

Deezer's own systems were not breached, as far as is known. In November 2022 Deezer learned that a former advertising contractor had kept a 2019 copy of its user data, which was then leaked and spread on a hacking forum. The copy held names, email addresses, dates of birth, gender and locations, but no passwords or payment details.

Was I affected by the Deezer data leak?

Check your email address on Have I Been Pwned, which lists 229 million addresses from the leak. If you had a Deezer account before mid-2019, assume your name, email and date of birth are known to scammers, and treat emails about Deezer payment problems with suspicion.

Was Deezer fined over the leak?

No. In December 2025 France's data protection authority, the CNIL, fined the contractor, Mobius Solutions Ltd, €1 million. It found that Mobius kept the data of more than 46 million Deezer users after the contract ended and used it to improve its own advertising tools without Deezer's instruction.

Does Deezer have two-factor authentication?

We found no two-step login for Deezer accounts. Deezer sends a six-digit code to your email before you can change your email address or password, which protects against some takeovers. Use a unique password and secure the email account linked to Deezer.

Is Deezer safe for kids?

Mostly, with setup. All explicit content plays by default, so turn on the filter that hides explicit tracks and cover art, or use a kid profile in a Deezer Family plan. There is no open chat with strangers. The App Store rates the app 13+.

Sources

  1. 1.Deezer: Music Player, Podcast – App Store listing and App Privacy label (opens in a new tab) · Apple App Store, 2026
  2. 2.Deezer – Data safety (opens in a new tab) · Google Play, 2026
  3. 3.Data breach: MOBIUS SOLUTIONS LTD fined €1 million (opens in a new tab) · CNIL, 2025
  4. 4.Third Party Data Breach (opens in a new tab) · Deezer Support, 2026
  5. 5.Have I Been Pwned – Deezer breach record (API) (opens in a new tab) · Have I Been Pwned, 2026
  6. 6.Deezer Privacy Policy (opens in a new tab) · Deezer, 2021
  7. 7.Change Your Deezer Username, Email Or Password (opens in a new tab) · Deezer Support, 2026
  8. 8.Deezer security.txt (vulnerability disclosure contacts) (opens in a new tab) · Deezer, 2026
  9. 9.Explicit Content on Deezer (opens in a new tab) · Deezer Support, 2026
Spot a mistake?