Great news for Sonos users who value privacy and control over their connected services: Sonos has finally added the ability to remove third-party sessions directly from your account settings.

The New Feature

Sonos has introduced a new "Third-party connections" section in their account settings with the following functionality:

Third-party connections If you remove sessions, you will be signed out of all devices and will need to re-authenticate connections to integrations like Amazon Alexa and Google Assistant. It may take up to 24 hours to remove sessions from some integrations.

Remove sessions and sign out of all devices

You can access this feature at https://www.sonos.com/myaccount/user/profile.

Why This Matters

In my previous article addressing security concerns, I mentioned that one valid concern was the inability to easily revoke access to third-party integrations. At the time, I wrote:

The concern about the inability to easily revoke access is completely valid. I strongly agree that Sonos should list OAuth integrations alongside other third-party connections in their app so users can disconnect at any time.

Sonos has now addressed this concern, giving users a straightforward way to revoke access to all third-party connections, including Cast to Sonos.

What This Means for Cast to Sonos Users

Yes, this feature allows you to disconnect Cast to Sonos from your Sonos account. While this might seem counterproductive for me to highlight, I believe it's important to be transparent about user control and privacy.

Here's what you should know:

You're always in control: If you ever want to revoke Cast to Sonos's access to your Sonos system, you now have an official way to do so through Sonos's account settings.
Tokens are stored in your browser: As I've emphasized before, all access tokens are stored directly in your browser's extension storage—not on any external server. This means you could always effectively revoke access by clearing the extension data, but now you have an official Sonos-provided option as well.
Re-authentication is simple: If you remove sessions and later want to use Cast to Sonos again, you'll simply need to re-authenticate through the extension. The process takes just a few seconds.

A Commitment to Privacy

I'm genuinely pleased to see Sonos implement this feature. Even though it goes against my immediate business interests (making it easier for users to disconnect), I believe that giving users control over their data and connected services is the right thing to do.

This aligns with the privacy-first approach I've always taken with Cast to Sonos:

No tokens stored on external servers
Transparent about data handling practices
Clear documentation of security measures

Looking Forward

This update from Sonos reinforces my commitment to building trust with users through transparency. If you have any questions about Cast to Sonos's security practices or how your data is handled, please don't hesitate to reach out through the feedback form.

Your privacy matters, and I'm glad Sonos is making it easier for users to maintain control over their connected services.