LG Smart TVs Log Audio While Off and Scan Local Networks for Devices

Unauthorized Data Collection Identified

Research by Gamers Nexus, Level1Techs, and independent security researchers revealed that LG smart TVs actively collect data beyond typical expectations. Tests on retail LG OLED models, including the G5, showed continuous scanning of local area networks for secondary devices like phones and smartwatches. The TVs also gather internal IP addresses, names, and signal strengths of nearby Wi-Fi networks, along with location data.

Audio Recording in Standby Mode

A significant finding was the TV's ability to capture clear microphone audio while the screen appeared to be powered down in standby mode. If disconnected from the internet, the TV saved voice input locally and uploaded the stored files once network access was restored. This indicates persistent audio recording capabilities even when the device is not actively in use.

Data Usage by LG Ad Solutions

The collected data is channeled to LG Ad Solutions, LG's targeted advertising division. LG claims 216 million global smart TV sales, while its ad division states access to 363 million addressable devices in the US alone by tracking other hardware on the same network. The TVs also employ Automated Content Recognition (ACR) to sample on-screen audio and video for logging viewing habits across inputs, though the new testing shows data collection extends beyond ACR.

Security Vulnerabilities and Recommendations

Researchers also documented remote code execution vulnerabilities within the webOS operating system, which are currently undergoing responsible disclosure. Given the broad network listeners and data sweeps, the research team recommends disconnecting LG smart TVs from the internet and using external streaming devices to mitigate privacy and security risks. LG has not yet issued a comment regarding these findings.