SiriusXM is a satellite and streaming audio service operated by Sirius XM Radio LLC and its subsidiaries (including Pandora Media, LLC), all owned by publicly traded Sirius XM Holdings Inc. (NASDAQ: SIRI). Its privacy policy discloses broad registration, vehicle, and listening-behavior data collection, use of proprietary/licensed modeling tools to infer additional information about users from listening history and demographic data, and disclosure of several data categories to third-party advertising and analytics partners that it self-classifies as a "sale" or "share" under the CCPA, with a standard opt-out mechanism. Ownership is fully traceable through SEC filings, which list Sirius XM Radio LLC, Pandora Media LLC, and ad-tech subsidiary AdsWizz Inc. as subsidiaries of Sirius XM Holdings Inc. A New York court found in November 2024 that SiriusXM's subscription-cancellation process violated the federal ROSCA consumer-protection law by forcing customers through a burdensome retention gauntlet; this is a consumer-protection finding, not a privacy violation, and is disclosed here for context rather than used to floor the track-record subscore. No privacy-specific enforcement action, breach, or court finding was found in this review.
TRACK RECORD
1 ENFORCEMENT ACTION
[2024-11-22]
The New York Attorney General announced that a New York Supreme Court ruling (Nov. 22, 2024) found SiriusXM violated the federal Restore Online Shoppers' Confidence Act (ROSCA) by maintaining a subscription-cancellation process significantly more burdensome than its sign-up process, forcing subscribers through repeated retention offers before cancelling. This is a consumer-protection finding about cancellation practices, not a data-privacy violation.
SiriusXM's Privacy Policy (effective March 18, 2026) discloses that Registration Data -- including name, email address, mailing address, phone number, birth year, and zip code -- is collected in part to "identify and recognize you across services and devices," alongside separately enumerated categories for Vehicle Data, Payment Data, Sensitive Personal Data, and Precise Geolocation Data.
Sirius XM Holdings Inc.'s Form 10-K for fiscal year 2025 (filed with the SEC, CIK 0000908937, filed 2026-02-05), Exhibit 21.1 (Subsidiaries), lists Sirius XM Inc., Sirius XM Radio LLC, and Pandora Media, LLC, as well as ad-tech subsidiary AdsWizz Inc., among the subsidiaries of the publicly traded parent.
SiriusXM's Privacy Policy identifies "Third-Party Advertising Entities and Analytics Providers" and "Third-Party Business Relationships" as categories of third parties to whom Vehicle Data is sold or shared for targeted advertising.
SiriusXM's California Consumer Privacy Act Disclosures (last updated July 1, 2026) grant California consumers a "Right to Opt-Out of Sale or Sharing," stating that consumers may opt out of the sale of their Personal Information or its sharing with third parties for cross-context behavioral advertising.
The New York Attorney General announced that a New York Supreme Court ruling (Nov. 22, 2024) found SiriusXM violated the federal Restore Online Shoppers' Confidence Act (ROSCA) by maintaining a subscription-cancellation process significantly more burdensome than its sign-up process, forcing subscribers through repeated retention offers before cancelling. This is a consumer-protection finding about cancellation practices, not a data-privacy violation.
The SiriusXM iOS app's Apple App Store privacy label (fetched from SiriusXM's App Store product page) discloses that Identifiers and Usage Data may be used to track the user across apps and websites owned by other companies.
SiriusXM's Privacy Policy states the company uses "proprietary and licensed modeling tools and algorithms" to infer additional information about users from listening history and demographic data, for purposes of personalizing service, marketing, and advertising.