LG Smart TV Privacy Claims: What the Evidence Shows

Your living-room TV can look completely asleep: black panel, tiny standby light, no app open. Yet the machine may still have power, a network connection, and software waiting for a command. That distinction sits at the center of a new dispute over LG smart TVs, privacy, and what the word “spying” actually describes.

On September 6, 2026, Gamers Nexus published a more-than-two-hour investigation into LG televisions running webOS, LG’s smart-TV operating system. Working with security researchers, the team used packet capture, which records a device’s network traffic, and firmware analysis, which examines the software inside the device. The report alleged that some tested TVs scan home networks, collect viewing information, and handle microphone data in ways that could create serious privacy and security risks. LG rejected the claims in a statement published by Tom’s Hardware on September 9. (tomshardware.com)

The headline is larger than the test

The phrase “216 million spy TVs” makes for a memorable headline, but it should not be read as a laboratory result from 216 million individually tested sets. The number refers to the scale of LG’s global smart-TV footprint; the investigation examined a much smaller group of devices. That difference matters because model, region, firmware version, and enabled features can all change how a television behaves. A finding on one webOS build deserves attention, but it should not automatically be applied to every LG television in every home.

The controversy also combines three different technologies. Separating them makes the story less mysterious.

ACR tracks the screen, not necessarily the room

Automatic content recognition, or ACR, is a system that identifies what appears on a television. It periodically samples audio or video from the displayed content, creates a compact digital fingerprint, and compares that fingerprint with a library of known programs, advertisements, or games. Think of it as a TV making a barcode from a scene rather than saving an entire movie.

A 2024 academic study tested ACR behavior on LG and Samsung televisions. The researchers reported that LG’s ACR traffic could appear while the television was being used as an external HDMI display, meaning the content came from a laptop or game console rather than a built-in streaming app. In their tests, opting out of the relevant tracking controls stopped communication with the identified ACR destinations. That is evidence of viewing-data collection, but it does not prove that the TV is recording conversations in the room. LG says its ACR, personalized advertising, and related features require separate opt-in consent. (arxiv.org)

A useful mental map looks like this:

screen or HDMI input ──> ACR fingerprint ──> content match or audience profile
microphone ─────────────> wake-word check ──> voice service after activation
home network ───────────> device discovery ──> casting and smart-home features

This is a model of the technologies involved, not a finding that every path is active on every TV.

Network scanning is a privacy question and a security question

A local area network, or LAN, is the private network created by your home router. Phones, printers, laptops, game consoles, and smart speakers usually share it. LG acknowledged that its televisions can scan for nearby devices on the same network, describing the behavior as a normal way to support casting, device connections, and smart-home features. (tomshardware.com)

That explanation addresses what the feature is meant to do, not whether it is designed with the right limits. A TV that inventories devices learns something about the household around it. The information may be useful for connectivity, but it also expands the device’s attack surface, a term for the number of places where a software flaw could give an attacker a way in. Network discovery is not automatically surveillance, yet it deserves the same scrutiny as any other connected-home feature.

Standby is not the same as unplugged

The microphone allegations are harder to discuss because the investigation and LG’s response appear to focus on different layers of the system. LG says voice data is processed when someone holds the microphone button on the remote or uses a wake word such as “Hi LG” after enabling far-field voice recognition. The company says wake-word detection happens locally on the TV and that audio is deleted without being sent to its servers when no wake word is recognized.

A wake word is the short phrase that tells a voice assistant to pay attention. Far-field recognition means the microphones are designed to hear that phrase from across the room. On supported LG models, features such as Always Ready can keep parts of the TV active after the screen is switched off so voice commands can still work. In other words, a black screen does not necessarily mean a fully powered-down computer.

Gamers Nexus reported additional concerns involving audio logs, readable transcripts, and vulnerabilities that could potentially let an attacker activate or access microphone-related functions. LG’s statement addressed ambient conversation collection and wake-word processing, but Tom’s Hardware noted that it did not address every claim, including the allegation about transcripts stored in plain text. Plain text means information that can be read directly without first decrypting it.

Why the answer is not a clean yes or no

The honest answer to “Is my LG TV spying on me?” is neither a blanket yes nor a blanket no. ACR viewing measurement, local-network discovery, normal voice-assistant behavior, and an exploitable security bug are separate claims. A vulnerability that lets an attacker turn on a microphone would be a security failure, but it would not by itself prove that LG routinely uploads every ambient conversation. Conversely, local wake-word processing still means a microphone may be active; it does not mean that all captured audio reaches a cloud server.

Settling the dispute would require reproducible tests tied to exact model numbers and firmware versions. Researchers would need to show whether the captured material is raw audio, a transcript, a content fingerprint, or a diagnostic log; where it is stored; when it leaves the TV; and what changes after each privacy setting is disabled. Tom’s Hardware said it had not independently verified either the investigation’s claims or LG’s counterclaims, so the most dramatic parts of the story remain disputed.

A calmer way to protect your living room

You do not need to choose between panic and ignoring the issue. A few deliberate settings reduce exposure:

• Open the voice settings and disable hands-free or direct voice recognition if you do not use it. On many recent models, the path is Settings → All Settings → General → AI Service → Voice Recognition Settings. If voice wake-up is unnecessary, review Always Ready, Quick Start, or Quick Start+ as well. Menu names vary by model.
• Review Settings → Privacy & Terms → User Agreements. LG says agreements related to viewing information, voice features, and personalized advertising are optional, while the basic terms and privacy policy are required for services such as Netflix and YouTube. Look for ACR, viewing information, and interest-based advertising separately; turning off one does not necessarily turn off the others. (lg.com)
• If the TV is mainly a display for a streaming box or game console, keep the TV itself off your main home network when practical. A separate guest network or isolated network segment can limit what the television can discover, although the exact protection depends on the router.
• Install firmware updates, and unplug the TV completely when private conversations require the highest confidence. Disconnecting the internet may stop transmission, but it cannot answer every question about local processing or storage raised by the investigation.

The larger lesson reaches beyond LG. A smart TV is a networked computer with a very large screen, not a passive pane of glass. Once you treat it that way, microphone permissions, viewing-data switches, software updates, and network separation become ordinary parts of owning one.