LG smart TVs reportedly log and transmit user data even offline or in standby mode

The investigation reveals LG smart TVs actively collect and transmit data about users and their environments, regardless of whether the TV is powered on, offline, or in standby. This includes scanning local Wi-Fi networks for nearby devices, logging location data, and recording audio through built-in microphones. The persistence of this behavior, even when disconnected from the internet, suggests data is stored locally and uploaded once connectivity is restored, bypassing user expectations of privacy in low-power states.

For engineers, this highlights a critical gap in transparency and control over device behavior. Smart TVs are often treated as passive displays, but the findings show they operate as active data collection nodes. The use of Automatic Content Recognition (ACR) to identify viewing habits across all inputs, including HDMI, further complicates assumptions about data isolation. This raises questions about how such data is secured, who has access to it, and whether users can meaningfully opt out without sacrificing core functionality.

The implications extend beyond LG, as the report notes ACR is widely used by other smart TV manufacturers. However, the offline data collection and delayed transmission are particularly concerning, as they undermine common privacy safeguards like network segmentation or power cycling. Engineers integrating smart devices into ecosystems must now consider whether similar behavior exists in other hardware and how to mitigate risks, such as disabling microphones or restricting network access by default.

The investigation also underscores the difficulty of auditing proprietary firmware. Packet captures and external testing were required to uncover this behavior, which may not be feasible for most users or organizations. This lack of visibility makes it challenging to verify compliance with privacy regulations or internal security policies. For device manufacturers, the findings may prompt calls for clearer disclosures, granular controls, or even regulatory intervention to define acceptable boundaries for data collection.