I'm more interested in the security you have. Looks like to me that apart the obvious doubt users will have of how and what you will do with their data, there is the aspect of a big red mark on your back of getting hacked and giving access to countless of associated profiles.

Do the "Top Albums In 2015" come from RescueTime? If so, how can that be enabled from within RescueTime?

No, that music listening we are getting from Spotify through Facebook. The app info is from Rescuetime though.