Your LG TV Might Still Be Listening to You—Even When It Looks Like It’s Off
A Gamers Nexus investigation discovered that LG televisions continue to scan home networks, capture audio through hidden microphones, and track viewing data even when appearing powered down—findings that emerged four months after LG settled privacy violations with Texas regulators. The testing revealed sophisticated data collection mechanisms that persist regardless of user-facing privacy settings or stated company policies.
Why It Matters
This investigation exposes a significant gap between corporate privacy commitments and actual device behavior, suggesting that regulatory settlements may not effectively prevent problematic data practices. The findings raise broader questions about accountability in the smart TV industry and consumers' ability to control what connected devices collect about their homes and behavior.
Key Facts
- Investigation scope: Gamers Nexus spent over 500 hours and approximately $70,000 investigating LG TV data collection practices
- Network scanning capability: LG TVs use UPnP protocol to map every connected device on a home's Wi-Fi network
- Hidden microphone findings: Researchers recovered usable audio from a second microphone that the mute switch does not control
- Settlement timeline: LG settled with Texas regulators in May; the investigation findings emerged four months later
- Residential proxy prevalence: Security researchers found residential-proxy code in approximately 42% of apps on LG's webOS store
Gamers Nexus, working alongside independent security researchers and hardware reviewers, conducted an extensive investigation into LG smart television data collection practices and discovered troubling privacy vulnerabilities. The team found that LG sets routinely scan entire home networks using UPnP protocols, automatically mapping and identifying phones, laptops, and other connected devices. More alarmingly, researchers successfully extracted usable microphone audio from televisions even when their screens appeared off and in tests where devices were completely disconnected from the internet—only to have stored audio uploaded immediately upon reconnection.
The core data collection mechanism operates through Automatic Content Recognition (ACR) software, which creates digital fingerprints of screen content and audio to identify what programs are playing. Researchers discovered this system continues functioning even when TVs are used solely as HDMI monitors, with input switching providing no ability to disable tracking. Most concerning was the discovery of a second, hidden microphone that remains active even when users engage the device's built-in mute function. Voice commands are converted to plain text and stored in local logs, while the microphone stays active for 10 to 15 seconds after speech ends, potentially capturing unintended ambient conversation.
The investigation identified significant security vulnerabilities alongside privacy concerns. Researchers found unpatched remote-code-execution bugs that could allow attackers to execute commands on televisions across networks. Additionally, security firm Spur discovered residential-proxy code embedded in roughly 42% of apps available on LG's webOS store—software that secretly reroutes users' internet traffic through their home connections to make external browsing appear domestic, effectively allowing others to mask their online activity.
LG's privacy violations carry particular significance given the company's explicit statements to the contrary. In July, LG representatives told reporters that sets "do not collect, record, or store ambient conversations," claims directly contradicted by the investigation's findings. The company's settlement with Texas regulators in May required informed consent before ACR data collection and a clear opt-out mechanism, yet the Do Not Sell My Personal Information toggle remains disabled by default before users even connect their TVs to the internet. Furthermore, LG added a forced-arbitration clause to its terms of service shortly after the investigation's initial publication, preventing buyers from pursuing class-action litigation over privacy violations.
The Gamers Nexus team has announced plans to crowdfund investigations into Samsung, Vizio, and other smart TV manufacturers, while regulatory cases against Sony, Hisense, and TCL continue in Texas courts. The findings underscore a broader pattern among technology companies where privacy assurances diverge substantially from device capabilities and actual data practices.
Keep Reading
First Xiaomi, then the world: why Arm might give phone gaming a huge graphics boost
Eric Wu’s newest company, out of stealth since May, is going after construction’s labor crunch
OpenAI Chief Scientist Warns AI Labs May Need to Slow Down
