Your TV is spying on you - Find out how, and turn it off! - YouTube

Hidden surveillance features in popular television brands raise serious concerns about data collection and security

Smart televisions have become the norm in American households, with their promise of convenient streaming and voice control. But these internet-connected devices are collecting far more data than most consumers realize—and doing so in ways that may compromise both privacy and security.

The Hidden Cost of "Smart" Features

While a 50-inch 4K smart TV can now be purchased for as little as $228 at major retailers, that low price comes with a catch: manufacturers are subsidizing hardware costs by monetizing viewer data. The real profit lies not in the television sale itself, but in the ongoing collection and sale of viewing habits, making consumers the product rather than the customer.

Automatic Content Recognition: Beyond Your Streaming Apps

The primary surveillance mechanism is Automatic Content Recognition (ACR), a technology now standard in televisions from Samsung, LG, Vizio, Roku, and other major brands. ACR creates audio and video "fingerprints" of everything displayed on screen—not just from built-in streaming apps, but from all connected devices including game consoles, set-top boxes, DVD players, and even content from over-the-air broadcasts.

Most concerning is that ACR captures data from external devices plugged into HDMI ports. This means personal content—such as home videos streamed from phones or computers—can be sampled and transmitted to remote servers for identification and data matching.

Technical analysis shows these systems typically transmit between 17-20 kilobytes of data per minute. While manufacturers claim they send only downsampled, blurred fingerprints, some newer ACR systems from companies like Samba TV now collect up to 7,200 images per hour for enhanced logo and advertisement detection.

Always-Listening Microphones

Many smart TVs from Samsung, LG, Sony, TCL, Hisense, and Vizio incorporate microphones for voice assistant features. Some implementations use push-to-talk remotes, while others employ always-on far-field microphones built directly into the television.

Samsung's terms of service have previously warned users: "Please be aware that if your spoken words include personal or sensitive information, that information will be among the data captured and transmitted to a third party." This revelation sparked widespread privacy concerns when it went viral in 2015.

How Your Data Is Used and Sold

Television manufacturers sell collected data to advertisers and data brokers, who then link it with information from phones, tablets, and online shopping histories to create comprehensive consumer profiles. Roku has been particularly transparent about its data practices, publishing a corporate blog post explaining that ACR allows them to understand "on a second-by-second basis what content viewers are watching on their linear TVs, what ads they saw, how much of an ad they viewed."

This granular data reveals viewing patterns that can indicate political affiliations, religious beliefs, income levels, and stress indicators. Children's viewing habits are also tracked and monetized through IP address linking.

Legal Actions and Regulatory Response

The television industry's data practices haven't gone unchallenged:

In 2017, Vizio paid a $2.2 million settlement to the Federal Trade Commission after secretly tracking 11 million televisions and selling viewing data without proper consent.
LG was caught in 2013 collecting viewing data even after users disabled the tracking setting.
Samsung faced public backlash in 2015 over privacy policy language about microphone data collection.
Amazon Fire TV devices have been repeatedly flagged for installing forced advertisements on purchased devices.

Despite these actions, fines have remained small relative to manufacturers' revenues, doing little to change industry practices.

Security Vulnerabilities

Smart TVs present significant cybersecurity risks. Many run modified Android or Linux builds that stop receiving security updates after only a few years, leaving devices vulnerable. Security researchers have demonstrated that compromised televisions can be hijacked to display fake alerts, install malware, or conduct surveillance.

The CIA's "Weeping Angel" tool, revealed in leaked documents, specifically targeted Samsung televisions to turn them into eavesdropping devices. Compromised smart TVs have also been incorporated into botnets for distributed denial-of-service attacks and cryptocurrency mining.

Software support varies dramatically by manufacturer:

Samsung: up to 7 years of Tizen OS updates
LG: up to 5 years of webOS updates
Hisense: up to 8 years of VIDAA updates
Amazon: 4 years
Roku, TCL, Vizio, Sony, and Panasonic: no stated support policy

The Dumb TV Dilemma: Weighing Your Options

Consumers seeking to avoid smart TV surveillance face a challenging marketplace reality: truly "dumb" televisions without internet connectivity are increasingly rare and often more expensive than their smart counterparts. This creates a paradox where privacy-conscious consumers must navigate complex tradeoffs.

The Case for External Streaming Devices

Using a high-quality display panel with an external streaming device (Apple TV, Roku stick, Google Chromecast, Amazon Fire TV Stick) offers several advantages:

Easier updates and replacement. A $50-150 streaming device can be updated or replaced far more easily than a wall-mounted television. When security vulnerabilities emerge or software support ends, replacing the streaming device is financially feasible.

Better privacy controls. Apple TV, in particular, offers stronger privacy protections than most smart TV platforms, with more transparent data practices and stricter app review policies. While these devices still collect usage data, they don't monitor content from other HDMI sources.

Consistent interface. External devices provide the same user experience across multiple televisions and can be taken when moving or traveling.

Superior performance. High-end streaming devices often provide smoother interfaces and faster app performance than built-in TV software.

However, this approach requires completely disconnecting the television from the internet—via both Wi-Fi and Ethernet—to prevent ACR from monitoring the external device's output through the HDMI connection. This means sacrificing firmware updates that might improve picture quality or fix bugs unrelated to smart features.

The Smart TV Compromise

For consumers who prefer integrated solutions or who have already purchased smart TVs, the key question becomes: Can ACR be disabled while maintaining access to streaming apps?

Samsung allows users to disable ACR (called "Viewing Information Services") through Settings > Support > Terms & Policy > Viewing Information Services, and the built-in apps continue to function. Voice recognition can be separately disabled in Settings > All Settings > General & Privacy > Voice > Voice Recognition. However, Samsung still collects data about which apps are used and when, even with ACR disabled.

Roku TVs permit disabling ACR while keeping apps functional. Users must disable two separate settings: Settings > Privacy > Advertising > "Limit ad tracking" and Settings > Privacy > Smart TV Experience > "Use info from TV inputs." The apps remain operational, though users will still see advertisements in the interface and Roku continues tracking app usage.

Vizio allows ACR to be disabled via Menu > System > Reset & Admin > Viewing Data, and streaming apps continue working. However, Vizio's Inscape ACR technology has been subject to regulatory action for collecting data even when users believed they had opted out.

Amazon Fire TV editions let users disable ACR through Settings > Preferences > Privacy Settings > Device Usage Data while maintaining app functionality. However, Amazon's extensive data collection through its streaming ecosystem continues regardless.

LG presents the most restrictive approach. Disabling ACR and other tracking features through Settings > All Settings > General > About This TV > User Agreements causes the television to block access to all smart TV apps until the tracking is re-enabled. This effectively forces users to choose between privacy and functionality—a practice that raises questions about meaningful consent.

Sony, TCL, and Hisense (using Google TV or Android TV) generally allow ACR to be disabled through Settings > Privacy while maintaining app access. However, Google's own data collection through the operating system and individual streaming apps continues.

The Reality Check

Even with ACR disabled on smart TVs, consumers face ongoing data collection:

Streaming apps themselves (Netflix, Hulu, Disney+, etc.) track viewing habits regardless of the TV platform
Smart TV manufacturers continue collecting data about which apps are launched, how long they're used, and when
Voice assistants, when enabled, transmit audio data for processing
Many TVs reset privacy settings to default (data collection enabled) after firmware updates

Additionally, the promise of "disabling" data collection relies entirely on manufacturers honoring those settings—something past regulatory actions have shown isn't always guaranteed.

Consumer Reports' Recommendation

For maximum privacy protection, the optimal setup is:

Purchase the best quality display panel available (smart TV or otherwise)
Never connect the television to any network
Use an external streaming device, preferably Apple TV for its stronger privacy protections
Place streaming devices on isolated network segments when possible

For consumers who prefer the integrated experience or have already invested in smart TVs, disable every tracking feature available, implement network-level ad blocking, and regularly review privacy settings after firmware updates. Samsung and Roku TVs currently offer the best balance of functionality with ACR disabled, though all platforms continue some level of data collection.

The harsh reality is that true privacy requires treating modern televisions as untrusted devices—either by never connecting them to the internet or by accepting that some level of surveillance is the cost of convenience.

SIDEBAR: The "Off" Button Illusion

When you press power, is your TV really off?

The comparison to George Orwell's 1984 is unsettling but apt. In the novel, telescreens monitored citizens constantly and couldn't be turned off. Modern smart TVs present a similar concern: when you press the power button, the device enters standby mode rather than truly powering down.

What "Standby" Really Means

In standby mode, smart TVs maintain network connectivity to enable features like:

Quick-start capabilities
Automatic firmware updates
Voice wake-word detection
Remote control responsiveness

Network monitoring by technically-minded consumers has revealed that many smart TVs continue making periodic connections to manufacturer servers even when "off," sending telemetry data and checking for updates.

The Microphone Question

Smart TVs with always-on voice assistants (similar to Amazon Echo or Google Home devices) are designed to constantly listen for wake words. While manufacturers assure consumers that nothing is transmitted until the wake word is detected, there's no practical way for consumers to verify what closed, proprietary devices are actually doing.

Multiple incidents with smart speakers have revealed unintended activations that recorded conversations never meant to be captured. Smart TVs with similar always-listening capabilities could behave identically—and Samsung's 2015 privacy policy acknowledged this vulnerability by warning users about "personal or sensitive information" being captured.

The Orwellian Inversion

What makes modern smart TV surveillance particularly dystopian is the business model:

You purchase the device
The device then surveils you
Your data is sold for profit
You receive more targeted advertising
Opting out means losing functionality you paid for

In Orwell's vision, the Party used telescreens for political control. Today, corporations use smart TVs for profit extraction. The surveillance is equally pervasive, just wrapped in language about "personalization" and "enhanced user experience."

True Power Disconnection

To completely disable a smart TV, consumers must:

Physical power cut. Use a power strip with a switch or unplug the device entirely. This is the only way to guarantee the TV isn't listening, transmitting, or updating.

Network disconnection. Even when powered on for viewing, keep the TV disconnected from Wi-Fi and Ethernet. Use external streaming devices instead.

Verify standby power draw. Unusually high power consumption in standby mode may indicate continued processing and network activity beyond simple "waiting for remote" functionality.

The telescreens in 1984 were mandatory government installations. Our version emerged through market forces: surveillance-enabled TVs are subsidized to be affordable, while private alternatives are expensive or nonexistent. Most consumers "choose" to be monitored because that's the only economically viable option.

The critical difference is that—for now—we can still physically disconnect these devices, demand better privacy protections through regulation, and refuse to treat constant surveillance as normal. But the parallel should concern everyone: we've voluntarily installed devices uncomfortably similar to Orwell's telescreens in our homes, and we paid for the privilege.

SIDEBAR: Step-by-Step Privacy Settings by Brand

Samsung TVs (Tizen OS)

Disable ACR: Press Home > Settings > Support > Terms & Policy > Viewing Information Services > Toggle OFF
Disable Voice Recognition: Settings > All Settings > General & Privacy > Voice > Voice Recognition > OFF
Limit Ad Tracking: Settings > All Settings > General & Privacy > Privacy > Advertisement > Limit Ad Tracking > ON
Disable Interest-Based Ads: Settings > All Settings > General & Privacy > Privacy > Advertisement > Delete Advertising ID
Network Disconnect (optional): Settings > General > Network > Network Status > disconnect or Settings > General > Network > Open Network Settings > Wi-Fi OFF

Result: Apps continue functioning; ACR disabled; voice data not collected

LG TVs (webOS)

Disable Live Plus: Settings > All Settings > General > About This TV > User Agreements > Live Plus > OFF
Disable Viewing Data: Settings > All Settings > General > About This TV > User Agreements > Viewing Information > OFF
Limit Ad Tracking: Settings > All Settings > General > About This TV > User Agreements > Limit Ad Tracking > ON
Disable Voice Recognition: Settings > All Settings > General > AI Service > Voice Recognition > OFF

Warning: Disabling User Agreements will block access to all smart TV apps on most LG models

Alternative Approach: Keep TV disconnected from internet entirely and use external streaming device

Roku TVs

Disable ACR: Settings > Privacy > Smart TV Experience > Use info from TV inputs > UNCHECK
Limit Ad Tracking: Settings > Privacy > Advertising > Limit ad tracking > CHECK
Disable Microphone: Settings > Privacy > Microphone > Channel microphone access > OFF
Reset Advertising ID: Settings > Privacy > Advertising > Reset advertising identifier

Result: Apps continue functioning; HDMI monitoring disabled; ad tracking limited

Amazon Fire TV Edition

Disable ACR: Settings > Preferences > Privacy Settings > Device Usage Data > OFF
Disable Interest-Based Ads: Settings > Preferences > Privacy Settings > Interest-based Ads > OFF
Disable Alexa: Settings > Preferences > Privacy Settings > Alexa Privacy > Review Voice History (and delete); Disable voice recognition
App Usage Data: Settings > Preferences > Privacy Settings > Collect App Usage Data > OFF

Result: Apps continue functioning; ACR disabled; some Amazon data collection continues

Vizio TVs (SmartCast)

Disable ACR: Menu > System > Reset & Admin > Viewing Data > Toggle OFF
Limit Ad Tracking: Menu > System > Reset & Admin > Limit Ad Tracking > ON
Disable Voice Services: Not available on all models; check Settings > Voice

Note: Vizio has been fined for ignoring opt-out settings; consider network disconnection

Result: Apps continue functioning, but manufacturer's compliance with settings is questionable

Sony/TCL/Hisense (Google TV/Android TV)

Disable Usage Diagnostics: Settings > Privacy > Usage & Diagnostics > OFF
Disable Personalized Ads: Settings > Privacy > Ads > Delete advertising ID / Opt out of Ads Personalization
Disable Google Assistant: Settings > Google Assistant > OFF (or don't set up)
Check Manufacturer ACR: Look for brand-specific settings (varies by manufacturer) in Settings > Device Preferences > Privacy or About

Note: Google collects data through the OS; individual manufacturer may add additional ACR

Result: Varies by manufacturer; some models may disable apps, others continue functioning

Network-Level Protection (All Brands)

After adjusting TV settings, implement additional safeguards:

DNS-Based Blocking: Configure router to use NextDNS, AdGuard DNS, or similar service with smart TV tracking blocked
Pi-Hole or AdGuard Home: Set up network-wide ad/tracking blocker
VLAN Isolation: Place TVs on separate guest network with client isolation enabled
Regular Audits: Check privacy settings after each firmware update, as some manufacturers reset them

When in Doubt: Nuclear Option

Complete Internet Disconnect

Forget all Wi-Fi networks in TV settings
Physically unplug Ethernet cable
Use external streaming device only
Sacrifice firmware updates for guaranteed privacy

This approach eliminates all smart TV data collection but requires external devices for streaming content.

Protecting Your Privacy

Consumers concerned about smart TV surveillance can take several protective measures:

Disable ACR immediately. This setting is deliberately buried in menus under names like "viewing data," "Live Plus," "smart interactivity," or "sync plus." Instructions vary by manufacturer but can typically be found in privacy or advertising settings. (See sidebar for detailed instructions by brand.)

Disconnect from the internet. Using an external streaming device (Apple TV, Roku stick, Chromecast) while keeping the television offline prevents most data collection. External devices are easier to update and replace than a television.

Disable voice recognition or physically block microphones if concerned about audio surveillance.

Use network-level blocking. Solutions like Pi-Hole, AdGuard Home, or NextDNS can prevent televisions from transmitting data even if settings are reset after firmware updates.

Segment your network. Placing smart TVs on isolated guest or IoT VLANs prevents them from accessing other devices on home networks.

Delete advertising IDs periodically. Most smart TVs allow consumers to reset their advertising identifiers in settings menus.

Consider true power disconnection. Use a power strip with a physical switch to completely cut power when the TV isn't in use, ensuring it cannot listen or transmit in standby mode.

The Opt-Out Dilemma

While manufacturers technically allow users to disable tracking features, the process is intentionally cumbersome. Some brands, including LG, disable all smart TV functionality if users opt out of data collection, forcing consumers to choose between privacy and the features they paid for. This "choice" between surveillance and functionality raises questions about meaningful consent.

Samsung and Roku currently represent the better options for consumers who want to use smart TV features while disabling ACR, though both platforms continue collecting other usage data. LG's approach of blocking app access when tracking is disabled represents the most consumer-hostile policy among major manufacturers.

The Bottom Line

Smart televisions have evolved into sophisticated surveillance devices that monitor viewing habits, collect audio data, and share personal information with third parties—all while displaying targeted advertisements on hardware consumers have already purchased. The industry's business model depends on continuous data extraction, with security and privacy as afterthoughts.

The marketplace offers no perfect solutions. True "dumb" TVs are largely unavailable at reasonable prices, while smart TVs that respect privacy settings are the exception rather than the rule. Consumers must choose between the convenience of integrated smart features with ongoing surveillance, or the privacy of disconnected displays with external streaming devices.

Until stronger privacy regulations emerge, consumers must take active steps to protect themselves, recognizing that their seemingly affordable television came at a different kind of cost: their personal data and private viewing habits. The comparison to Orwell's telescreens isn't hyperbole—it's an uncomfortable reminder of how normalized surveillance has become in our homes.

Sources

Federal Trade Commission. (2017). "Vizio to Pay $2.2 Million to FTC, State of New Jersey to Settle Charges It Collected Viewing Histories on 11 Million Smart TVs Without Users' Consent." https://www.ftc.gov/news-events/news/press-releases/2017/02/vizio-pay-22-million-ftc-state-new-jersey-settle-charges-it-collected-viewing-histories-11-million
Roku, Inc. Corporate Blog. "What Roku's Automatic Content Recognition Technology Means for Advertisers." https://advertising.roku.com/blog/acr-technology
Amazon.com, Inc. Fire TV Privacy Notice and FAQ. https://www.amazon.com/gp/help/customer/display.html?nodeId=202102720
LG Electronics Privacy Policy and User Agreements (accessed via smart TV interface, 2018 OLED models).
Samsung Electronics Privacy Policy for Smart TV Services. https://www.samsung.com/us/account/privacy-policy/
Consumer Reports. "How to Turn Off Smart TV Snooping Features." https://www.consumerreports.org/privacy/how-to-turn-off-smart-tv-snooping-features/
Samba TV. "Advanced Content Recognition Technology" (corporate marketing materials).
WikiLeaks. "Vault 7: CIA Hacking Tools Revealed - Weeping Angel." (2017). https://wikileaks.org/vault7/
Hisense Privacy Notice for Google TV Devices (2019).
Apple Inc. "Apple TV Privacy Policy." https://www.apple.com/legal/privacy/
Orwell, George. 1984. Secker & Warburg, 1949.

Search This Blog

Science, Time, and Spirit

Smart TVs Are Watching You: What Consumers Need to Know About Privacy Risks