iHeartRadio is a free, ad-supported radio and podcast streaming app operated by iHeartMedia, Inc. (Nasdaq: IHRT), a publicly traded US media company. iHeartMedia's own privacy notice discloses collection of approximate and (via the bundled Sigalert traffic feature) precise geolocation, voice data when users activate voice controls, listening history, and cookie/SDK-based technical data, and self-declares that some of these disclosures to advertising partners are a "sale" or "share" under California law. Apple's App Store privacy label for the app confirms Location, Identifiers, and Usage Data are used to track users across apps and websites owned by other companies. Ownership is traceable via SEC filings: iHeartMedia, Inc. trades on Nasdaq and its FY2025 Form 10-K Exhibit 21 lists its operating subsidiaries. iHeartMedia has a documented regulatory record: the FTC finalized a consent order (with $9.4 million in state penalties) over deceptive Google Pixel 4 endorsements aired on iHeartMedia stations, and iHeartMedia + Entertainment, Inc. filed a data breach notification with the California Attorney General for a December 2024 unauthorized-access incident.
TRACK RECORD
2 ENFORCEMENT ACTIONS
[2023-02-09]
The FTC finalized consent orders against Google LLC and iHeartMedia, Inc. in February 2023, settling allegations that the companies aired nearly 29,000 deceptive first-person radio endorsements of Google's Pixel 4 phone by iHeartMedia personalities who had not actually used the product; separate state judgments required the companies to pay $9.4 million in penalties.
iHeartMedia + Entertainment, Inc. filed a data breach notification with the California Attorney General's office reporting unauthorized access to its systems on December 24 and December 27, 2024, as recorded in the Attorney General's public data security breach reporting log.
iHeartMedia's Privacy Notice (effective July 1, 2026) discloses that iHeartRadio and its bundled Sigalert traffic feature collect approximate location derived from IP address or device, and precise geolocation when the user enables it, in addition to voice data, listening history, and technical data gathered via cookies, pixels, and SDKs.
Exhibit 21 (Subsidiaries of Registrant) to iHeartMedia, Inc.'s FY2025 Form 10-K lists iHeartCommunications, Inc. (Texas) and iHeartMedia + Entertainment, Inc. (Nevada) among its operating subsidiaries, publicly documenting the corporate structure behind the iHeartRadio brand.
iHeartMedia, Inc.'s Form 10-K for fiscal year 2025 (filed with the SEC, CIK 0001400891) states its Class A Common Stock trades on the Nasdaq Global Select Market under the ticker symbol IHRT, confirming it is a publicly traded, SEC-reporting parent company.
iHeartMedia's CCPA-facing Privacy Notice states that it may use or disclose personal information (including identifiers, commercial information, internet/network activity, geolocation data, and inferences) in a manner considered a "sale" or "share" under California law to deliver relevant advertising and marketing, while separately committing not to knowingly sell or share the personal information of consumers under age 16.
iHeartMedia + Entertainment, Inc. filed a data breach notification with the California Attorney General's office reporting unauthorized access to its systems on December 24 and December 27, 2024, as recorded in the Attorney General's public data security breach reporting log.
The FTC finalized consent orders against Google LLC and iHeartMedia, Inc. in February 2023, settling allegations that the companies aired nearly 29,000 deceptive first-person radio endorsements of Google's Pixel 4 phone by iHeartMedia personalities who had not actually used the product; separate state judgments required the companies to pay $9.4 million in penalties.
The iHeartRadio iOS app's Apple App Store privacy label (fetched live from the app's product page) discloses that Location, Identifiers, and Usage Data may be used to track the user across apps and websites owned by other companies, the App Store's explicit cross-app/cross-site tracking category.
iHeartMedia's Privacy Notice describes interest-based advertising (IBA) that relies on browser/device and usage information, and directs users to opt out via third-party ad-tech mechanisms including the Digital Advertising Alliance's optout.aboutads.info, AppChoices for mobile apps, and named identity partners LiveRamp and The Trade Desk — confirming real third-party ad-tech tracking infrastructure rather than first-party-only measurement.