Skip to main content
CybersecurityPrivacy & Surveillance

LG Smart TVs Collect Extensive User Data, Researchers Warn

Smart TV on an entertainment center with cords trailing to a wall outlet.

"The findings represented 'an egregious invasion of privacy,'" Gamers Nexus editor-in-chief Stephen Burke told viewers after his team's inspection of LG smart‑TV traffic and internal data. The claim, delivered in a video report, ties together a string of technical observations the channel says expose how far some consumer hardware reaches into users' networks and private lives.

What Gamers Nexus says it found

The YouTube channel reported that LG smart TVs continued capturing audio even after the devices' voice recognition feature had been activated, and — the team asserts — even while the display was in standby. After collecting network traffic and inspecting internal data, Gamers Nexus said it located plaintext transcripts generated from audio captured by the TV.

The investigators also reported the TVs collected IP addresses, location data, and details about nearby Wi‑Fi networks, including network names, signal strengths, and channel numbers. The TVs reportedly enumerated devices on the local network that were not paired with them, naming smartphones, watches, routers, thermostats, air purifiers, server baseboard management controllers, and PCs.

According to Gamers Nexus, Wireshark packet captures contained such a large quantity of private data that the team could not display all of it in the accompanying video. The channel said all of this was native behavior from LG equipment and that the TVs were capable of continuing to capture audio while disconnected from the internet, storing that audio locally, and transmitting related data once connectivity was restored.

Network telemetry, plaintext transcripts and a claimed RCE

The team told viewers it found plaintext audio transcripts among the data exfiltrated by the TVs. It also said packet captures showed a wide range of device and network telemetry flowing off the set. Gamers Nexus said it was coordinating with security researchers to disclose vulnerabilities responsibly and specifically cited an alleged remote code execution (RCE) flaw as one of the issues under review.

This latest report follows a separate Gamers Nexus claim in July that certain LG monitors could trigger the installation of the LG Monitor App on Windows 11 machines via the operating system's device metadata system. That earlier behaviour depended on users selecting Windows' Recommended Settings during setup and being signed into the Microsoft Store; Gamers Nexus noted the installer displayed pop-up promotions for McAfee. LG previously told publications that "McAfee is not installed automatically and is never installed without the user's explicit consent."

LG Ads Solutions and automatic content recognition (ACR)

The company does not hide the fact that its devices feed data into an advertising business, LG Ads Solutions. In 2022 LG announced that automatic content recognition (ACR) technology previously limited to U.S. smart TVs would be deployed across sets sold in 27 countries, with those insights marketed through its ad unit. LG said at the time that the ACR data was anonymized and handled in accordance with privacy regulations, and that advertising customers could use the data to measure campaign effectiveness and whether an ad led to app or service registrations.

Gamers Nexus claims that the data its equipment sends is forwarded to LG's ads unit. The LG Ads Solutions fact sheet — which requires contact details to access — states there are 49 million LG TVs in the U.S. running webOS and cites a reach of 363 million "addressable secondary devices," promising "precision targeting at the device level, across households." The channel's report stresses that the specific behaviour the team observed, such as generating audio transcripts while a display is in standby, is not called out in product descriptions or marketing materials and that consumers must navigate multiple privacy links to find policy details; neither the main product page nor those documents explicitly references LG Ads Solutions.

What this means for technologists, regulators, and consumers

  • Technologists and security teams: Gamers Nexus says it is working with security researchers on responsible disclosure, including for an alleged RCE. Teams tasked with securing networks will likely prioritise inspection of smart‑device traffic and consider isolating or monitoring sets that can enumerate devices on local networks.
  • Policymakers and regulators: The report underlines a recurring complaint the source documents — that manufacturers may not be transparent at the point of purchase about the extent of data collection. Regulators focused on consumer disclosure and device telemetry could use such findings to evaluate whether existing disclosure practices meet legal or regulatory expectations.
  • Consumers and sensitive facilities: The story notes that ACR and similar technologies are common and that many consumers accept tradeoffs for financial savings, but highlights sharper privacy stakes when such devices are deployed in boardrooms and doctors' offices. The channel's findings — if accurate — raise practical questions for organisations that place smart TVs in sensitive environments.

LG's public position and remaining gaps

The Register has asked LG for comment. LG has previously told other publications that its TVs do not "collect, record, or store ambient conversations," and that voice recognition is an optional feature that processes voice data only when activated by the user. Gamers Nexus' assertions — plaintext transcripts, continued audio capture in standby, offline storage and later transmission, broad network enumeration and a claimed RCE — sit in tension with those public statements.

Whether the technical claims will be corroborated by independent researchers, validated in vendor disclosures, or remediated by firmware updates remains to be seen. For now the concrete elements in the record include Gamers Nexus' packet captures and transcripts, LG Ads Solutions' marketing reach and technology statements, and LG's prior denials about recording ambient conversations. That juxtaposition is likely to drive further scrutiny from security researchers, privacy-minded customers, and anyone responsible for installing these devices in sensitive spaces.

Original story at The Register