MuseGroup’s decision to include telemetry (data collection) in Audacity is based on two new features the company intends to introduce in the next version which, if following Audacity’s traditional version numbering, should be version 3.0.3. The two upcoming new features are ‘automatic updates’ and ‘error reporting’. The current version (3.0.2) doesn’t include any such telemetry because it does not include these networking features.
- OS version
- User country based on IP address
- OS name and version
- Non-fatal error codes and messages (i.e. project failed to open)
- Crash reports in Breakpad MiniDump format
- Data necessary for law enforcement, litigation, and authorities’ requests (if any)
As a result, users intending to download the upcoming new Audacity version are being warned that the software may now be classed as spyware. The two items in the list of collected data that are causing much criticism are the IP address and data necessary for law enforcement. However, I would make the following observations:
User country based on IP address: According to MuseGroup, the user’s IP address is salted and retained for only 24 hours after which it is irretrievable.
Data necessary for law enforcement, litigation, and authorities requests: Is being criticized for lack of clarity/details. However, considering the software is used in many countries worldwide, all with differing privacy requirements/laws, it would be nigh on impossible to determine and delineate exactly what data is lawfully required per country. So, the vagueness is pretty much out of necessity.
Is Audacity Spyware or Not – My take on it
I say not. I don’t see anything in the list of collected data that is out of the norm — nothing more, and in many cases far less than popular applications are already collecting. Furthermore, according to MuseGroup, users will be able to opt out of the telemetry required for automatic updates, and telemetry required for error reporting will be opt-in. Personally, I see the addition of automatic updates and error reporting as beneficial and it’s simply a matter of fact that both require a certain amount of telemetry
You also might like: