Quick Answer: A July 2026 Gamers Nexus investigation reported that LG smart TVs scan the home network for connected devices, record microphone audio in standby, convert speech to plain-text logs, and upload that data to LG Ad Solutions once a connection returns. LG has strongly denied the central privacy claims. Until independent verification is complete, the safest step is to isolate the TV on its own network or replace its smart features with an external streaming device.
Your living room TV may be doing more than you think. A 135-minute investigation by Gamers Nexus, led by Steve Burke and working with Level1Techs and independent security researchers, alleges that LG smart TV spying goes well past content recognition. The claims are serious and specific enough that you should understand them, and unproven enough that you should check them before you panic. Here's what the researchers reported, what remains unconfirmed, and what you can do this week.
The Network Sweep: Your TV as a Scanner
The most surprising finding is that the TV does not just sit on your Wi-Fi. Using Wireshark packet captures on a retail LG G5 OLED, a 2025 flagship, the researchers reported that webOS runs LAN sweeps: it sends discovery queries across the local subnet looking for devices that have nothing to do with video playback.
When a phone, tablet, laptop, smartwatch, or IoT device responds, the TV reportedly logs what it finds. According to the Gamers Nexus-based reporting, the collected data includes:
- Internal IP addresses of nearby devices
- Device names and MAC-derived identifiers
- SSIDs and signal strengths of neighboring Wi-Fi networks visible to the TV's radio
- Location data tied to those network identifiers
The researchers said this happens out of the box and that they found no single setting that turns off the sweep on its own. That's the part most owners will miss. You're not dealing with a TV that listens passively. You're dealing with a device that initiates the queries, processes the replies, and packages the results.
The number that gives this weight is LG's own. LG reports roughly 216 million smart TV sales worldwide, while LG Ad Solutions tells advertisers it can reach 363 million secondary addressable devices in the US alone. The gap of about 147 million is simple subtraction, not a verified count, but it's the kind of mismatch that makes you ask where the extra devices come from. The investigation's explanation is household-level enumeration. Treat that as the researchers' inference until LG or an independent audit confirms it.
Standby Microphone Capture and the 10-to-15-Second Window
The microphone findings are the ones that will get the most attention, and they're the ones that contradict what most people assume about "standby." The team placed an LG G5 in what looked like standby, with a black screen and no visible activity, and monitored the microphone. The reported result was clean, intelligible audio.
Here's what matters technically. A dormant voice assistant usually reduces audio to wake-word feature vectors, which are abstract numbers designed to detect a trigger phrase. The researchers said the audio they captured was converted into plain-text transcription and stored in on-device logs. Plain text is far more useful for profiling than a wake-word detector ever needs to be.
The capture window is the second issue. According to the reporting, the microphone stays open for 10 to 15 seconds after someone stops speaking. Say "what's the weather," then turn and keep talking to your partner, and the TV is still recording. Anyone in the room who never addressed the TV gets swept in.
LG's published privacy language says its TVs "do not collect, record, or store ambient conversations." The investigation's claim is that the behavior described above contradicts that sentence. Whether a court or regulator agrees is a separate question, and one that depends on how the statement is read and what the firmware actually does.
Automated Content Recognition Goes Further Than Most Reporting Suggested
Automated content recognition (ACR) isn't new. Samsung, Vizio, LG, and Roku have all used it for years. ACR samples what's on screen, creates a fingerprint, and matches it against a database to identify the content. Most readers understood that as "the TV knows what you're watching."
The investigation argues the collection goes further. The reported position is that ACR feeds the same telemetry pipeline as the network scanning, location tagging, and voice logging, which makes the content fingerprint one piece of a broader household profile. The researchers also said ACR runs as a background process in webOS regardless of the active input, so it keeps fingerprinting even when you're using a console, Blu-ray player, or streaming stick over HDMI.
That last point has a clinical edge. The reporting says a compromised LG display could pull audio directly from an HDMI feed. One surgeon who reviewed the findings reportedly asked what this would mean for telemedicine sessions displayed on an LG panel. That's a fair question, and it's the kind of question you should ask your own IT team before the next video call.
webOS Vulnerabilities: What's Confirmed and What Isn't
The investigation also reports remote code execution (RCE) flaws in webOS. Be careful with this section, because the details are not public yet. The researchers said they reported the flaws to LG under responsible disclosure and are giving the company time to patch before publishing exploit details.
What's reportedly known is where the problem sits. The flaws live in webOS's network-facing services, the same network listeners that enable the LAN sweeps. An RCE means an attacker could, in principle, run code on the TV remotely. The team demonstrated a proof-of-concept on an LG G5 and used it to record room audio with the screen off and the Ethernet cable unplugged, then exfiltrate the file once the connection came back.
That was a controlled test, not an attack observed in the field. Here's the honest read: the demo shows what the vulnerability class could enable, not how often anyone has exploited it. Until the full disclosure and LG's patch notes are public, don't assume your model is compromised, and don't assume it's safe.
Why Unplugging Doesn't Stop the Collection
The common advice for a suspicious smart device is to unplug it from the network. The investigation says that doesn't stop collection on LG TVs. It just delays the upload.
Here's the cause-and-effect chain. When the team pulled the Ethernet cable, the TV kept transcribing voice input and queuing network scans, writing everything to internal flash storage. When they reconnected, whether minutes or days later, the full queued dataset uploaded to LG's servers.
That's store-and-forward collection. Disconnecting the TV doesn't pause it. It only means the data waits. Someone who switches off their Wi-Fi overnight may still have had the microphone and network scanner running the whole time.
The reporting says the only fully effective mitigation the team found was to disconnect the TV from networks permanently and use an external streaming device, such as an Apple TV or Chromecast, for smart functions. That's the one option that clearly removes the TV from the data path. Everything else in the next section is partial.
Where the Stakes Are Highest: Clinical and Corporate Settings
Home viewing is one problem. Commercial displays are another. LG panels sit in hospitals, medical offices, boardrooms, hotel lobbies, conference centers, and government buildings, often connected to networks carrying sensitive data.
In a hospital, audio captured from a telemedicine session could potentially be protected health information under HIPAA. In a law firm, it could be privileged communication. In a hotel, it could be a guest conversation recorded by a device the guest assumed was just a monitor. GDPR and other sector rules impose similar limits on personal audio.
The caveat matters. Whether any specific hospital or office LG display does this depends on the model, firmware version, and configuration. Compliance teams should get the vendor's written data-handling documentation and test the device on their own network before assuming either way. Don't rely on a news summary, including this one.
How to Limit Exposure, Ranked by Effectiveness
No option below is perfect. Each one addresses a different part of the reported pipeline, so pick based on how much you need to trust the TV.
If you want to act today, work through these steps in order:
- Check the TV's privacy and ACR settings. Turn off viewing information and ACR options where available. Per the reporting, no standard setting fully disables ACR, so treat this as partial.
- Move the TV to a guest or IoT network. The LAN sweep only sees devices on its own subnet. Isolating the TV limits what it can enumerate on the network where your laptops and phones sit. It does not fix a webOS RCE, so keep firmware current.
- Remove the microphone from the picture. Use a physical cover or unplug any voice remote from the room, and keep sensitive conversations away from the screen.
- Replace smart functions with an external streamer. This is the only mitigation the researchers said fully removed the TV from the data path.
Here's how these compare:
| Option | What it reduces | Main limitation |
|---|---|---|
| Turn off ACR and viewing data | ACR content fingerprinting, where the setting exists | No standard setting fully disables ACR, per the reporting |
| Isolate on guest/IoT network | Device enumeration on your main LAN | Does not block webOS RCE or the TV's own uploads |
| Physical mic cover or remote removal | Standby audio capture | Does nothing about network-side data or ACR |
| Permanent disconnect plus external streamer | All TV-side collection, per the reporting | You lose built-in apps and need an extra box |
The last row is the one to choose if you want certainty. The first three are reasonable interim steps if you need the TV's built-in features right now.
Frequently Asked Questions
is LG smart TV spying real?
The claims come from a 135-minute Gamers Nexus investigation that reports packet captures, microphone tests, and a proof-of-concept RCE on an LG G5. LG has strongly denied the central privacy claims. Independent verification and the full vulnerability disclosure are still pending, so treat the findings as serious but unconfirmed.
can a smart TV listen when it's off?
According to the reporting, yes, in standby mode. The researchers said an LG G5 in apparent standby captured and transcribed audio, storing it locally until the network connection returned. Turning the screen off does not necessarily stop the microphone.
what is automated content recognition on a TV?
Automated content recognition (ACR) samples what's on screen, creates a fingerprint, and matches it against a database to identify the content. It's used by Samsung, Vizio, LG, and Roku. The investigation argues ACR feeds broader household profiling, which is why it matters beyond content identification.
how to stop LG TV tracking without losing streaming?
Use an external streaming device such as an Apple TV or Chromecast and disconnect the TV from the internet. That's the only option the researchers said fully removed the TV from the data path. Partial options include turning off ACR and isolating the TV on a guest network.
Your Next Step
The most useful takeaway is simple: LG smart TV spying is alleged, not yet proven, and the risk depends on your setup. If the TV is in a home, start by moving it to a guest network and turning off ACR. If it sits in a clinic, boardroom, or hotel, get written data-handling documentation from the vendor and test it yourself. Check your TV's privacy menu tonight, note which options exist, and move the set to a guest network this week. Then pass this to whoever manages the LG display in your office or clinic, because that's the person who needs to ask the questions.