You're doing exactly what Forbes wants you to do: fear mongering. Privacy policies are legal liability waivers. They are not statements of intent. There is absolutely no indication whatsoever that Spotify is harvesting your data and selling it to third parties to make some money on the side. That is a ridiculous assumption, and you need to provide damn good evidence if you expect me to even begin to consider that.

What any REASONABLE person would assume is that Spotify is simply doing what everyone else does, which is track your usage of their product in order to better target ads.