A new class-action lawsuit claims that Apple is “intentionally and unlawfully” disclosing its customers’ iTunes listening data to third parties in violation of state privacy laws.
The lawsuit from three individuals from two states, Rhode Island and Michigan, was filed Friday in a California district court, Bloomberg reported Friday.
According to the lawsuit, which was published by AppleInsider, the company’s “disclosures of the Personal Listening Information of Plaintiffs and the other unnamed Class members were not only unlawful, they were also dangerous because such disclosures allow for the targeting of particularly vulnerable members of society.”
The suit alleges that Apple is sharing data—including names, addresses, and genre-specific music tastes—with third parties who can “supplement that information with additional sensitive personal information” that the company discloses about its customers. As apparent proof of the allegation, the suit points to marketing entities who sell this information.
“For example, any person or entity could rent a list with the names and addresses of all unmarried, college-educated woman over the age of 70 with a household income of over $80,000 [$AU115,473] who purchased country music from Apple via its iTunes Store mobile application,” the suit states. “Such a list is available for sale for approximately $136 [$AU196] per thousand customers listed.”
Sharing data about consumers’ listening habits can reveal intimate information about them, the lawsuit claims, and can put them at risk of predatory behaviour from “fraudulent telemarketers” and others looking to take advantage of vulnerable groups. The suit names at least two marketing entities that allegedly sell such lists.
In addition, the lawsuit claims that Apple, without first obtaining permission from its customers, shared detailed user listening data via its developers tools. Issues with the way user listening data was being shared with developers in the past were raised by Ben Dodson on his blog in January of 2016 as well as in a bug report to the company.
The suit claims that despite contacting Dodson informing him that the company was aware of the issue, Apple did not resolve it until roughly eight months later with the release of iOS 10.
The class action lawsuit is being brought by the plaintiffs on behalf of other Apple customers in their respective states who “had their personal listening information disclosed to third parties by Apple without their consent.” The suit is seeking $361 each for those Apple customers in Rhode Island and $7,217 each for those in Michigan.
Apple did not immediately return a request for comment.