Sonos, Inc. (Nasdaq: SONO) is a publicly traded maker of connected smart speakers and the Sonos control app. Sonos's own Privacy Statement groups vehicle-scale telemetry into three named categories — Functional Data, Advanced Feature Data, and Additional Usage Data — and states that voice wake-word processing happens locally on-device and is not transmitted to Sonos unless a wake word is detected. Sonos's Apple App Store privacy label self-declares a 'Data Used to Track You' category (Usage Data) plus a broad 'Data Linked to You' set including contact info, identifiers and search history used for the developer's own advertising/marketing — a more expansive self-declaration than some peers. The company's own policy states it does not 'sell' or 'share' personal information only for known minors under 16, implying general adult users' data can be sold/shared under CCPA definitions, subject to an opt-out. Ownership is fully traceable via SEC EDGAR/10-K filings. Sonos's 2025 Form 10-K discloses a previously found product vulnerability that could let third parties gain unauthorized network access to a customer's playlists and limited device control; no FTC or state-AG enforcement order was found via a primary source in this review.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
7 ON FILE
COLLECTION
Sonos's Privacy Statement states that data collected about a customer's Sonos System (Products, individually registered Products, and the Sonos App) falls into three named categories — Functional Data, Advanced Feature Data, and Additional Usage Data — and separately states that Additional Usage Data, covering performance and personalization telemetry, is data 'you may choose to share with us' beyond what is required for the product to work.
Sonos's own 2025 Form 10-K (filed with the SEC) states that the company completed its initial public offering in August 2018 and trades on Nasdaq under the symbol SONO, with principal executive offices at 301 Coromar Drive, Santa Barbara, California.
SEC EDGAR's own company-search record for 10-K filers confirms the registrant as 'Sonos Inc,' CIK 0001314727, classified under SIC code 3651 (Household Audio & Video Equipment), based in California.
The Privacy Statement's CCPA rights section states that Sonos does not 'sell' or 'share' personal information, as those terms are defined under the CCPA, only for consumers it has actual knowledge are under 16 years of age — implying general adult users' personal information can be sold or shared under those CCPA definitions, subject to an opt-out described elsewhere in the policy.
Sonos's 2025 Form 10-K discloses, as an example of product-security risk, that the company 'previously discovered a vulnerability in our products that could be exploited when a customer visited a website with malicious content,' allowing a customer's local network to be accessed by third parties who could gain unauthorized access to the customer's playlists and other data and limited control of the customer's devices.
Sonos's own Apple App Store privacy-nutrition label for the Sonos app self-declares a 'Data Used to Track You' category (Usage Data) and a broad 'Data Linked to You' set — including Contact Info, Name, Identifiers, User Content, and Search History — with contact info and identifiers explicitly usable for 'Developer's Advertising or Marketing.'
The Privacy Statement describes how voice-enabled Sonos Products listen for a wake word: the device continuously buffers audio locally, and if no wake word is detected the buffer is overwritten in a loop and never sent to Sonos or any third party, with only wake-word-triggered audio forwarded for processing.