Is TREBEL safe to use?

TREBEL integrates 53 third-party SDKs spanning advertising, infrastructure, and analytics. Its App Store privacy label declares cross-app tracking via Identifiers. It collects data linked to your identity including Identifiers, Usage Data, and Diagnostics. It includes 19 advertising or attribution SDKs. Whether this is acceptable depends on your personal privacy preferences.

What permissions does TREBEL need?

TREBEL requests 10 iOS permissions: App Tracking Transparency, Camera, Microphone, Photo Library, Location (When In Use), Location (Always), Location (Always & When In Use), Motion & Fitness, Save to Photo Library, and Apple Music.

What data does TREBEL collect?

According to its App Store privacy label, TREBEL declares cross-app tracking via Identifiers. It collects data linked to your identity including Identifiers, Usage Data, and Diagnostics. It collects Location, Contact Info, User Content, Search History, Identifiers, Usage Data, and Diagnostics not linked to your identity.

How many SDKs does TREBEL have?

TREBEL integrates 53 third-party SDKs. 17 for advertising, 2 for attribution, 8 for analytics, 1 for crash reporting, 2 for social integration, 11 for infrastructure, and 9 for other.

Does TREBEL use Facebook tracking?

Yes. TREBEL includes 4 Facebook SDKs: Facebook AEM, Facebook SDK, Facebook Login, and Facebook Share. These are used for ad measurement, attribution, and integration with Facebook's advertising platform (developers.facebook.com).

Does TREBEL use App Tracking Transparency?

Yes. TREBEL requests the App Tracking Transparency permission, which means it asks for your consent to track your activity across other companies' apps and websites.

Does TREBEL access your location?

Yes. TREBEL requests location access. The developer states: "Your precise location helps us to better determine your driving behavior even if you don't have the app open.".

Does TREBEL access your camera or microphone?

TREBEL requests access to both your camera and microphone. The developer says camera access is for "To be able to add your picture to your profile". Microphone access is for "We need to listen to the song that’s playing to identify it. Please allow access to your microphone". These permissions are only active when you grant them in iOS Settings.

Does TREBEL run in the background?

Yes. TREBEL registers 4 background modes, which means it can perform certain tasks when you're not actively using it.

What are some alternatives to TREBEL?

Other music apps include Rythmix , Zona , Shoom , Speaker Connect , Amazon Music , and ReverseAudio . Each app takes a different approach to music and varies in its data collection and SDK usage.

Music · Privacy report

TREBEL Music - Download Songs

Free · ★4.7 · M&M Media, Inc.

Is TREBEL safe?

It leans heavily on third-party trackers.

Our take. TREBEL is built with more third-party tracking code than 98% of the music we have scanned, including an analytics SDK from Germany.

Privacy footprint · vs 86 musicHeavy

Trackers from other companies27 · a lot

typical music: 6

Data the app links to you3 types · some

typical music: 3 · from its own privacy label

What it collects about you

TREBEL links 3 categories of your data to you.

From the developer's own App Store privacy label. These are the kinds of data TREBEL ties to your identity, and it also declares it shares data to track you across other apps.

IdentifiersUsage DataDiagnostics

Who else is inside

It carries trackers from 5 companies.

Third-party SDKs found in the app, matched to the company that publishes each. Present in the code; we do not observe what they transmit.

🏢Other third partiesadvertising

A third-party SDK.

SDKs

🇺🇸GoogleAnalytics

Firebase, AdMob and Google analytics SDKs, built to record how you use the app and serve ads.

SDKs

🇺🇸MetaAdvertising

Facebook advertising SDKs, built to link app activity to Facebook and Instagram ad profiles.

SDKs

🇩🇪AdjustAttribution · Germany

Marketing attribution, built to tie installs and in app events back to ad campaigns.

SDKs

🇺🇸LiftoffAdvertising

In app video advertising network.

SDK

How it compares

Where it sits among music.

Every one of these apps we have scanned, on the two measures above: third-party trackers it carries (across) and data it links to you on its own label (up). Toward the top right is more invasive.

Each dot is one music app. TREBEL sits to the right, carrying more third-party tracking than most.

Other signals

Two more flags.

Each is a fact read straight from the app. The same checks run on every app we scan. Only the ones that apply here are shown.

It declares cross-app tracking

Its own App Store label says it tracks you across other companies apps and websites using your advertising identifier.

It sends analytics to a company in Germany

Adjust is a Germany company. Its analytics SDK is built into the app.

The evidence

What it's built from.

All 53 SDKs in the app, grouped by what they are for. 27 are third-party trackers.

17advertising

2attribution

8analytics

1crash reporting

25standard libraries

27 of the 53 are third-party trackers. The rest are the app's own code and standard open-source building blocks.

Show the full SDK list

Other third partiesadvertising

Amazon Publisher Services (DTB) · Google Interactive Media Ads (IMA) · LiveRamp ATS · Nimbus Ads Core · Nimbus Ads · Nimbus Ads Render · Nimbus Ads Render Static · Nimbus Ads Render Video · Nimbus Ads Request · Open Measurement SDK (Nimbus) · Google UMP (Consent) · CleverTap

GoogleAnalytics · USA

Google AdMob · Firebase A/B Testing · Firebase Core · Firebase Performance · Firebase Remote Config · Firebase Remote Config Interop · Firebase Sessions · Google Data Transport

MetaAdvertising · USA

Facebook AEM · Facebook Audience Network · Facebook SDK · Facebook Login

AdjustAttribution · Germany

Adjust · Adjust Signature

LiftoffAdvertising · USA

Vungle Ads

Standard libraries25 · on-device

The app's own code plus open-source interface, storage and networking libraries.

How we know this

Counterspy downloads the app from the App Store and statically analyzes its compiled binary. Embedded SDKs are matched against a signature database and resolved to the company that operates each. We also read the developer's App Store privacy label, which lists the data the app says it collects and links to you. We do not run the app or intercept its traffic, so we report capabilities present in the code and the developer's own disclosures, not proven transmission. We assess privacy and data collection, not malware, security flaws, or developer intent. Reports are automated and never edited for payment. Scan v7.7.10, 2026-04-03.

Third-party trackers are advertising, analytics and attribution SDKs detected by static signature matching. Presence shows a capability is compiled in, not that it ran or transmitted data.
"Data the app links to you" is the count of data categories the developer declares as Data Linked To You in its App Store privacy label. Labels are self-reported and not verified by Apple.
Comparison across the 86 music in our corpus. Trackers: median 6. Data linked to you: median 3.