Key facts
- LG smart TVs scan home Wi-Fi networks and map connected devices.
- Microphone audio was captured from LG TVs even when they appeared to be off or disconnected from the internet.
- Automatic Content Recognition (ACR) software continues to operate regardless of input source.
- A secondary, hidden microphone on LG TVs can record audio even when the main microphone is muted.
- Residential-proxy code, which reroutes internet traffic, was found in nearly half of LG's webOS store apps.
An extensive investigation by Gamers Nexus, in collaboration with Level1Techs and independent security researchers, has revealed that LG smart TVs continue to collect data and capture audio even when appearing to be powered off or disconnected from the internet. The research found that LG sets scan a household's entire Wi-Fi network, mapping all connected devices, and can record microphone audio. This occurs even when the TV is used solely as an HDMI monitor or when the main microphone is muted, with a separate hidden microphone still active. The Automatic Content Recognition (ACR) software, which identifies content being watched, reportedly continues to function, and audio is uploaded once the TV reconnects to the internet. Voice commands are converted to plain text and logged, with the microphone remaining active for a period after speech ceases. These findings come after LG settled with Texas regulators in May, agreeing to obtain informed consent before collecting ACR viewing data and to provide clear opt-out options. However, the investigation suggests the 'Do Not Sell My Personal Information' toggle remains off by default. Additionally, security researchers identified unpatched remote-code-execution bugs and discovered that approximately 42% of apps on LG's webOS store contain residential-proxy code, which can reroute a user's internet traffic. LG has stated it is working with developers to remove this code. The company also recently added a forced-arbitration clause to its terms of service.