Many cities have adopted smart city initiatives recently and have seen significant improvements in the services they offer to society and the environment. They are equipped to manipulate real-time physical entities and to disseminate smart information to people through smart transportation, healthcare, smart buildings, smart public security, smart parking, intelligent traffic systems, and agriculture. Someone can extract sensitive information from smart city applications. However, user resistance is the most common concern regarding privacy and security. Therefore, while designing and developing the applications, it is also pertinent to understand these security and privacy issues. This paper centers on the critical areas of smart city application and identifies concerns related to an integrative architecture of privacy and security by design. It also evaluates some of the existing approaches to the problems of security and privacy in information technology, which are core to the effective performance of smart city applications. It outlines areas for further research that still require attention to enhance performance.