Is Rockbot safe to use?

Rockbot integrates 32 third-party SDKs spanning infrastructure, analytics, and support. It collects data linked to your identity including Location, Contact Info, Identifiers, and Usage Data and 1 more category. It includes 1 advertising or attribution SDK. Whether this is acceptable depends on your personal privacy preferences.

What permissions does Rockbot need?

Rockbot requests 8 iOS permissions: Camera, Photo Library, Location (When In Use), Location (Always), Location (Always & When In Use), Bluetooth, Bluetooth Peripheral, and Apple Music.

What data does Rockbot collect?

According to its App Store privacy label, Rockbot collects data linked to your identity including Location, Contact Info, Identifiers, Usage Data, and Diagnostics. It collects Diagnostics not linked to your identity.

How many SDKs does Rockbot have?

Rockbot integrates 32 third-party SDKs. 1 for attribution, 6 for analytics, 1 for crash reporting, 1 for payments, 3 for customer support, 1 for social integration, 11 for infrastructure, and 5 for other.

Does Rockbot use Google SDKs?

Yes. Rockbot includes 15 Google or Firebase SDKs: Firebase App Check Interop, Firebase Auth, Firebase Cloud Messaging, Firebase A/B Testing, Firebase Core, Firebase Performance, Firebase Remote Config, Firebase Sessions, Google Data Transport, Firebase Crashlytics, Google Sign-In, Firebase Core Extension, Firebase Core Internal, Firebase Installations, and Google Utilities. These are used for cloud infrastructure and services, not advertising.

Does Rockbot access your location?

Yes. Rockbot requests location access. The developer states: "Rockbot needs to know your location to show you nearby venues.".

Does Rockbot access your camera?

Rockbot requests access to your camera. The developer says this is for "Rockbot uses the camera to scan QR codes in order to award free credits". These permissions are only active when you grant them in iOS Settings.

Does Rockbot run in the background?

Yes. Rockbot registers 2 background modes, which means it can perform certain tasks when you're not actively using it.

What are some alternatives to Rockbot?

Other music apps include Rythmix , Zona , Shoom , Speaker Connect , Amazon Music , and ReverseAudio . Each app takes a different approach to music and varies in its data collection and SDK usage.

Music · Privacy report

Rockbot - Request Music

Free · ★4.7 · Rockbot, Inc.

Is Rockbot safe?

It collects a lot of your data, and shares it with trackers.

Our take. Rockbot carries 7 third-party trackers and its own label declares it links 5 categories of your data to you. It collects a lot itself, and shares a lot with outside companies.

Privacy footprint · vs 86 musicModerate

Trackers from other companies7 · some

typical music: 6

Data the app links to you5 types · some

typical music: 3 · from its own privacy label

What it collects about you

Rockbot links 5 categories of your data to you.

From the developer's own App Store privacy label. These are the kinds of data Rockbot ties to your identity.

LocationContact InfoIdentifiersUsage DataDiagnostics

Who else is inside

It carries trackers from 2 companies.

Third-party SDKs found in the app, matched to the company that publishes each. Present in the code; we do not observe what they transmit.

🇺🇸GoogleAnalytics

Firebase, AdMob and Google analytics SDKs, built to record how you use the app and serve ads.

SDKs

🇺🇸BranchAttribution

Deep linking and marketing attribution.

SDK

How it compares

Where it sits among music.

Every one of these apps we have scanned, on the two measures above: third-party trackers it carries (across) and data it links to you on its own label (up). Toward the top right is more invasive.

Each dot is one music app. Rockbot sits to the right, carrying more third-party tracking than most.

The evidence

What it's built from.

All 32 SDKs in the app, grouped by what they are for. 7 are third-party trackers.

1attribution

6analytics

1crash reporting

1push & messaging

23standard libraries

7 of the 32 are third-party trackers. One is a push-notification SDK that delivers notifications, rather than tracking you across apps. The rest are the app's own code and standard open-source building blocks.

Show the full SDK list

GoogleAnalytics · USA

Firebase A/B Testing · Firebase Core · Firebase Performance · Firebase Remote Config · Firebase Sessions · Google Data Transport

BranchAttribution · USA

Branch

Push & messaging1 · notifications

Standard libraries23 · on-device

The app's own code plus open-source interface, storage and networking libraries.

How we know this

Counterspy downloads the app from the App Store and statically analyzes its compiled binary. Embedded SDKs are matched against a signature database and resolved to the company that operates each. We also read the developer's App Store privacy label, which lists the data the app says it collects and links to you. We do not run the app or intercept its traffic, so we report capabilities present in the code and the developer's own disclosures, not proven transmission. We assess privacy and data collection, not malware, security flaws, or developer intent. Reports are automated and never edited for payment. Scan v3.6.5, 2026-04-05.

Third-party trackers are advertising, analytics and attribution SDKs detected by static signature matching. Presence shows a capability is compiled in, not that it ran or transmitted data.
"Data the app links to you" is the count of data categories the developer declares as Data Linked To You in its App Store privacy label. Labels are self-reported and not verified by Apple.
Comparison across the 86 music in our corpus. Trackers: median 6. Data linked to you: median 3.