LG smart TVs are continuously collecting data from home networks even when appearing to be powered off, according to testing by Gamers Nexus in collaboration with Level1Techs and independent security researchers.
Network packet analysis using Wireshark showed the TVs actively scan local area networks for unrelated hardware, including phones and smartwatches. Beyond identifying connected devices, the sets also gather the names and signal strengths of neighboring Wi-Fi networks, along with location data.
According to the researchers’ findings, this data collection is fed into LG Ad Solutions, the company’s targeted advertising division. LG reports approximately 216 million smart TV sales globally. The ad division states it has access to 363 million secondary addressable devices in the US alone by tracking hardware on the same network as the TVs.
The sets run Automated Content Recognition (ACR) technology, which samples on-screen audio and video, converting them into digital fingerprints to log what users watch across different inputs. While ACR has been documented previously, the new testing shows data collection extends far beyond this.
During testing, researchers captured clean microphone audio while the screen appeared to be in standby mode. When the team disconnected the TV from Ethernet, the device continued saving voice input locally and uploaded the stored files once network access was restored.
The researchers also documented remote code execution vulnerabilities in webOS currently undergoing responsible disclosure. Given that the TV uses broad network listeners and conducts data sweeps by default, the team recommended disconnecting LG sets from the internet and using external streaming devices instead.
LG had not commented on the findings at the time of publication.
Key facts
- LG OLED models scan local networks for connected devices like phones and smartwatches
- TVs collect names, signal strengths of nearby Wi-Fi networks and location data
- Microphone audio is recorded while TV appears to be in standby mode
- LG’s ad division claims access to 363 million secondary devices in the US
- Data feeds into LG Ad Solutions for targeted advertising
- Remote code execution vulnerabilities were found in webOS