The Unexpected Privacy Risks of Smart TVs You Actually Can’t Disable

You went through the settings menu. You declined data sharing. You opted out of every toggle that sounded like “personalization” or “recommendations.” You might have even declined to create an account. And yet, your smart TV is almost certainly still sending data about what you watch back to its manufacturer and to a network of third-party advertising companies.

This isn’t paranoia. It’s how modern smart TV operating systems are designed, documented in regulatory filings, academic research, and the fine print of privacy policies that run to dozens of pages. The opt-outs that feel like choices are frequently narrower than they appear, and the data collection that persists after you decline the obvious permissions is what smart TV manufacturers—and the advertising industry they serve—are actually counting on.

Automatic Content Recognition: The Technology You Can’t Turn Off

Automatic Content Recognition (ACR) is the core surveillance technology in modern smart TVs. It works by capturing samples of whatever is being displayed on screen—a few frames per second—and comparing those fingerprints against a reference database to identify what you’re watching. It doesn’t matter whether you’re watching a streaming service, a connected Blu-ray player, a gaming console, a cable box, or over-the-air broadcast. If it’s on your screen, ACR sees it.

Samsung, LG, Vizio, TCL, Hisense, and Sony all ship ACR in their smart TV operating systems. Vizio settled an FTC case in 2017 for $2.2 million over ACR practices that predated meaningful disclosure—specifically for collecting granular viewing data (per-second, channel-by-channel) and selling it to advertisers without adequately informed consent.

Since that settlement, disclosure has improved and opt-out mechanisms exist on most platforms. Samsung calls its ACR system “SamSung Internet Services.” LG calls it “Live Plus.” Vizio uses a service called Inscape. The opt-out for each is buried at different depths in each TV’s settings menu, and the names don’t always match what you’d search for if you were trying to find them.

The more significant problem is that opting out of the named ACR service doesn’t always mean opting out of all viewing data collection. Some smart TV platforms share viewing data through their app ecosystem—streaming app providers that come pre-installed can independently collect viewing data through their own SDKs regardless of your ACR settings. The TV manufacturer’s opt-out applies to the TV operating system’s data collection; it doesn’t cascade to every app running on the platform.

The Business Model Beneath the Hardware

Understanding why this is hard to opt out of requires understanding the economics. A 55-inch 4K smart TV that sells for $300–$400 is priced below what the hardware, logistics, and retail margin would suggest. Manufacturers like TCL and Hisense are partly subsidising hardware cost with data licensing revenue—the ongoing revenue stream from selling audience data to advertisers.

Vizio publicly disclosed this model in its IPO filing in 2021. The company noted that its “Platform+” revenue (advertising and data licensing) operated at a much higher margin than its hardware sales, and that hardware served partly as a distribution mechanism for its data business. A TV isn’t just a product; it’s a customer acquisition vehicle for an ongoing data relationship.

This creates a structural tension with user privacy preferences. The company’s financial model depends on collecting viewing data. When a user opts out, that directly reduces the value of that user’s device to the company’s revenue model. The system is not designed to make opting out easy—the friction is intentional, and the residual data collection after opt-out is the floor the business model requires.

The advertising data ecosystem that smart TV data feeds is substantial. Viewing data is combined with purchase data, location data, and demographic data to create audience segments that advertisers buy for targeted campaigns. The value of knowing that someone in a specific zip code watched a show about home renovation last weekend is significant to a hardware store running connected TV advertising. The TV manufacturer, the data broker, and the advertiser all benefit from this transaction. The viewer does not.

What “Declining an Account” Actually Changes

Many buyers set up their smart TV by choosing the “Set up later” or “Skip” option instead of creating a manufacturer account. This does reduce some data linkage—the TV can’t associate your viewing history with your named account or email. But it doesn’t eliminate ACR or most other data collection.

Research published by Princeton and Chicago researchers in 2019 found that smart TVs sent data to external servers even without a user account being configured. The devices contacted advertising platforms, analytics services, and manufacturer-operated servers within minutes of first boot. The data sent included device identifiers that allow cross-device tracking even without a registered account.

The persistent device identifiers—advertising IDs similar to the ones on your phone—are the mechanism that makes account-free data collection valuable. Your viewing history may not be attached to your name, but it’s attached to a stable identifier associated with your IP address, which is itself tied to your household through your ISP. The anonymity of not having an account is more fragile than it appears.

The Microphone and Camera Problem

Voice control is a standard feature on most smart TV remotes and built-in interfaces. Amazon Alexa, Google Assistant, and manufacturer-built voice systems listen for wake words when activated. This is the expected and disclosed behaviour—saying “Hey Google” to your TV sends audio to Google’s servers, which is in the terms of service.

The less expected behaviour is what happens during voice activation. Multiple research investigations have documented smart TVs sending audio clips to servers after voice activation for purposes beyond the stated query—longer recordings than the command itself, recordings that triggered on sounds other than the intended wake word. Samsung’s 2015 privacy policy famously included language warning users that voice-activated commands, including personal communications, could be captured and transmitted to third parties.

The camera situation is somewhat better because most current TVs don’t include forward-facing cameras—the built-in camera trend from the early 2010s largely died after privacy backlash. But some high-end models still include cameras for video calling features, and budget models with cameras exist in some markets. For TVs with cameras, the same principle applies: the data disclosure requirements are in the privacy policy, but the policy is rarely read, and the controls are rarely intuitive.

What Actually Works to Reduce Data Collection

The most effective technical mitigation is network-level blocking. A Pi-hole or similar DNS-based ad blocker running on your home network can block the domains that smart TVs use to send data. This approach has been validated by researchers at Northeastern University who mapped the external domains that smart TVs contact during normal operation—a list that includes advertising platforms (DoubleClick, Moat, Innovid), analytics services, and manufacturer-specific data collection endpoints.

Blocking these domains doesn’t break core TV functionality—playback from streaming apps works normally because those apps use their own direct connections. What it prevents is the background beaconing that sends ACR data, usage analytics, and advertising telemetry to third-party servers. Research testing this approach found it substantially reduced the volume of data leaving smart TVs, though some manufacturer domains are harder to block without affecting update delivery.

For people who don’t want to run a network-level filter, the next best option is using the TV purely as a dumb display. Connect a streaming device—Apple TV, Roku, Amazon Fire TV Stick—and use it for all content consumption. Then configure the TV’s network interface to not connect to Wi-Fi at all. If the TV doesn’t have a network connection, it can’t send data. You lose smart TV features (built-in apps, voice control), but you gain a meaningful reduction in data collection from the TV platform specifically. The streaming device has its own privacy considerations, but you have more control over which one you choose.

Vizio TVs have a slightly cleaner opt-out path than most—the Inscape ACR opt-out is relatively accessible and the company has been under regulatory scrutiny that’s made its disclosures more consistent. Samsung’s SmartThings privacy controls are more fragmented, with different settings applying to different parts of the platform. LG’s settings vary significantly between WebOS versions.

The Regulatory Picture

Smart TV data practices have attracted attention from the FTC, state attorneys general, and consumer advocacy groups in the EU. The GDPR’s legitimate interest provisions have been used by some European smart TV operators to justify data collection without explicit consent, a practice that the Irish Data Protection Commission and others have challenged in several enforcement actions.

In the US, the Children’s Online Privacy Protection Act (COPPA) creates specific obligations when children’s content is identified through ACR—a smart TV that can tell when Bluey is playing arguably has obligations about what data it can collect and from whom. This angle is being actively explored by regulators.

The broader policy conversation about connected TV privacy is accelerating, but meaningful regulation that addresses the structural model—where hardware subsidisation depends on data collection—hasn’t yet materialised. The FTC’s ongoing rulemaking on commercial surveillance may change this, but the timeline is uncertain and the lobbying pressure from the advertising industry is substantial.

What This Means for Your Buying Decisions

If smart TV data collection concerns you, the most effective decision is made at purchase time. Projectors don’t run smart TV operating systems. Older TV panels without smart features are available at liquidation prices and work fine with a streaming device attached. Gaming monitors used as large displays have none of these issues.

Among smart TV brands, the differences in data practices are real but not dramatic—the entire industry operates similar models. The TV brands with the most transparent opt-out mechanisms and consistent regulatory compliance records are generally preferable to those with histories of settlement or enforcement action.

But the honest answer is that if you plug a smart TV into your Wi-Fi and don’t actively mitigate data collection, it will collect and transmit viewing data throughout its lifetime—regardless of which settings you toggle in the first-time setup. The systems are designed to make collection the default and opt-out the exception, with residual collection even after the most accessible opt-outs are engaged. That’s not a bug in these products. It’s the product.