LG has issued a detailed response to privacy concerns surrounding its smart TVs, saying that audio monitored for the “Hi LG” wake phrase is processed locally and is not converted to text, stored or sent to its servers when no wake phrase is detected. The company also says voice-recognition results are not retained while a TV is offline for later upload.
The statement follows testing and claims from Gamers Nexus and independent researchers, who reported apparent audio-related data generation in standby, local-network and nearby Wi-Fi discovery, and data that could remain on a disconnected TV. Researchers also raised the possibility of a remote-code-execution vulnerability. LG’s response disputes the interpretation that its TVs continuously record ambient audio, but it does not specifically confirm or deny the reported security flaw.
Voice controls and standby listening
According to LG, voice recognition is disabled by default and requires acceptance of its Voice Information Agreement. A session starts when a user presses the microphone button on the remote, or when a hands-free wake phrase is detected on models where Hands-free Voice Control has been enabled.
With hands-free control enabled, the integrated microphone can monitor audio in standby solely to detect the wake phrase, LG says. Once activated, a recognition session ends after roughly 10 seconds without detected speech and has a maximum duration of about 18 seconds. LG acknowledges that nearby speech or sounds can be included in recognition results if they overlap with an active voice command.
Compatible TVs also include a hardware microphone switch. Turning it off disables hands-free voice control through the TV’s built-in microphone, although the remote’s microphone can still be used when its button is deliberately pressed.
ACR and advertising data
LG also clarified how its optional Automatic Content Recognition feature works. ACR is disabled by default and requires acceptance of the Viewing Information Agreement. Interest-based advertising and cross-device advertising require separate consent.
The company says ACR does not capture screenshots or record video, voice or other audio streams. Instead, it creates a digital fingerprint of content through the TV’s internal audio processor. It can recognize programming from Live TV, HDMI-connected devices and LG Channels, but LG says it does not operate inside third-party apps such as Netflix or YouTube.
When ACR is enabled, LG says it may process the content fingerprint alongside device information, viewing source, network information and consent settings. ACR data may be shared with LG Ad Solutions, an LG-majority-owned affiliate, for audience segmentation and viewing-trend analysis. LG says voice-command audio and ambient sound are not provided to LG Ad Solutions for its advertising services.
LG acknowledges that, in some markets, these practices may fall under legal definitions of a “sale” or “sharing” of personal information. The company maintains that personalized and cross-device advertising still require separate consent.
Network discovery and security updates
LG says the reported network scanning involves distinct functions rather than a single household-profiling system.
- Device discovery identifies and controls equipment on the local network, including consoles, set-top boxes, DVD players and IoT devices. LG says this information is not used for household profiling, cross-device advertising or ad segmentation.
- Nearby Wi-Fi access-point information and signal strength may be processed to estimate a TV’s approximate location where ACR is available and enabled. LG says this occurs only after the relevant agreements have been accepted.
- ACR separately identifies supported viewing content through digital fingerprints and can supply data for audience analysis when the feature is enabled.
On security, LG says it runs a bug-bounty program, works with outside researchers and investigates reported vulnerabilities, issuing fixes or updates where necessary. For eligible products, it says security updates are provided for up to five years from the launch of the relevant webOS version.
LG says users can decline optional agreements without losing core functions such as streaming apps, Live TV, HDMI input or software updates. Consent for voice recognition, ACR and interest-based advertising can be withdrawn in TV settings; disabling ACR or withdrawing its agreement stops related data collection. The outstanding question is whether independent researchers can reproduce their reported behavior on the same TV models and webOS versions addressed by LG’s statement.
