Privacy & Surveillance
Is Your Smart TV Spying on You?
ACR Explained & How to Disable It
✍️ Rishabh Pandey📅 March 2025⏱️ 10 min read🔒 Cyber Security ▶ Netflix Series REC data $$$ 📡 ACR Server SELLS YOUR DATA 🎯 Advertisers Profile built 📱 Your Phone Targeted ads TV fingerprints your screen every few ms → sells to advertisers → targets you on every device
10ms
LG screen capture interval
15 sec
LG data upload to ACR servers
40M+
SambaTV devices worldwide
$2.2M
FTC fine on Vizio (2017)
📺 Introduction: Your TV Is Not Just a Screen
Your Smart TV is not merely a display — it is a surveillance device that continuously records what you watch. Every show, every channel, every Netflix episode, and even content from your laptop connected via HDMI — everything is silently fingerprinted and sold to advertisers.
This technology is called ACR — Automatic Content Recognition. In December 2025, Texas Attorney General Ken Paxton called it exactly what it is: “an uninvited, invisible digital invader.”
🚨
Breaking — December 2025Texas AG Ken Paxton filed lawsuits against Samsung, Sony, LG, TCL, and Hisense for illegal ACR data collection. Temporary Restraining Orders were issued against Samsung and Hisense — courts ordered them to immediately halt all data collection.
🔬 What Is ACR? How It Works
ACR is a fingerprinting technology built directly into your Smart TV. It takes tiny snapshots of your screen every few milliseconds, compares them against a massive database, and identifies exactly what you’re watching — show name, episode number, advertisement, everything. This data is then packaged and sold.
ACR — How It Works (Step by Step) STEP 1 📺 Screen Snapshot Every 10–500ms STEP 2 🔍 Fingerprint Created Audio + Video hash STEP 3 🗄️ Database Match Content identified STEP 4 💰 Data Sold Advertisers & data brokers
📊 ACR 4-Step Process — From your screen to an advertiser’s targeting database
🔬
UCL Research Proof — November 2024University College London tested Samsung & LG TVs on dedicated networks. LG TVs sent fingerprint data every 15 seconds to Alphonso (LG Ad Solutions). Samsung TVs contacted ACR servers every 60 seconds — even when a laptop was connected via HDMI.
🕵️ What Exactly Gets Tracked?
Not just TV shows. ACR logs far more than most people realise:
- Live TV channels — exact channel, timestamp, and watch duration
- Streaming apps — show name, episode, rewind count, pause points
- HDMI-connected devices — your laptop, gaming console, Blu-ray — everything on screen
- Work documents & presentations — if you used your TV as an external monitor
- Gaming sessions — which game, at what time, for how long
- Voice commands — some TVs have always-on microphones
“Theoretically, the system could recognise and match certain types of known content displayed on your external device, such as specific shows or products.”— Dr. Anna Mandalari, UCL Electronic & Electrical Engineering, November 2024
⚠️
Critical Warning — HDMI UsersIf your laptop is connected to a Smart TV via HDMI and a sensitive document is visible on-screen — ACR may fingerprint and transmit that content to external servers. UCL researchers experimentally confirmed this on both Samsung and LG TVs.
📊 Which Brands Are Doing This?
| TV Brand | ACR Technology | Data Frequency | Legal Action |
|---|---|---|---|
| Samsung | Viewing Information Services | Every ~60 sec | TRO Issued (Jan 2026) |
| LG | Alphonso / LG Ad Solutions | Every ~15 sec | Lawsuit Filed |
| Vizio | Inscape (proprietary) | Continuous | $2.2M FTC Fine |
| TCL | SambaTV / Google TV | Continuous | Chinese Law Risk |
| Hisense | SambaTV | Continuous | TRO Issued (Dec 2025) |
| Sony | SambaTV + Bravia/Google TV | Continuous | Lawsuit Filed |
| Roku | Roku ACR (Use Info) | Periodic | No action yet |
| Apple TV 4K | None — Apple confirmed | N/A | Safest option |
🛡️ How to Disable ACR — Step-by-Step with Screenshots
Exact navigation paths for every major brand, with UI mockups showing exactly what you’ll see on-screen.SamsungLGSonyTCL / HisenseRokuXiaomi / OnePlus
🔵 Samsung Smart TV — Disable “Viewing Information Services”
Samsung Smart TV — Privacy Choices (Actual Settings UI) ⚙️ Settings Samsung SmartThings Privacy Choices selected General Picture Sound ▶ Privacy Choices Support About TV Privacy Choices Viewing Information Services ← DISABLE THIS ACR: Captures what you watch and sells to advertisers. Currently ON. ← TURN OFF Interest-Based Advertising Targets ads to you based on viewing history Voice Recognition Services Microphone surveillance — should be OFF ✓ Do Not Sell or Share My Personal Information → Enable this
📸 Samsung Privacy Choices — all red-highlighted toggles must be turned OFF. The green row at the bottom should be enabled.
2025 Models:
Settings › Privacy Choices › Terms & Conditions › Smart Hub Terms › Uncheck Viewing Information ServicesTURN OFF
Older Models (SyncPlus):
Smart Hub › Settings › Support › Terms & Policy › SyncPlus and Marketing › Disable SyncPlus OFF
Also disable: Interest-Based Advertising and Voice Recognition Services. Enable Do Not Sell or Share My Personal Information.
🔴 LG Smart TV — Disable “Live Plus” (LG’s hidden ACR name)
LG WebOS — General Settings (Actual UI) ◀ All Settings — General LG WebOS 7.x Picture Sound General Network Accessibility Support AI Service / Home Settings Live Plus ← THIS IS ACR ⚠ LG deliberately calls their ACR “Live Plus” — never mentions ACR by name ← TURN OFF Home Promotion Promotional content on home screen Interest-Based Advertising Cross-device ad targeting Also: General › Privacy › User Agreements › Uncheck “Viewing Information”
📸 LG WebOS — “Live Plus” is LG’s name for ACR. It must be turned OFF. LG intentionally never uses the word “ACR”.
Settings › All Settings › General ›Live Plus› Toggle OFF OFF
Settings › All Settings › General › Privacy › User Agreements › Uncheck Viewing Information OFF
⚠️
LG’s Deliberate DeceptionLG never calls it “ACR” — it’s hidden under “Live Plus”. If you searched settings for “ACR” or “tracking”, you’d never find it. This is by design.
🟡 Sony Bravia (Google TV) — Two Separate Layers to Disable
Sony Bravia — Privacy Settings (Two Layers) ⚙ Privacy Settings Sony BRAVIA XR LAYER 1 — SONY’S OWN ACR Simitless / Bravia Viewing Data Sony’s proprietary ACR system — sends viewing data to Sony servers → Opt Out required Opt Out › LAYER 2 — GOOGLE TV DATA COLLECTION Ads Personalization Settings › Privacy › Ads → Opt out of Ads Personalization Usage & Diagnostics Settings › Privacy › Usage & Diagnostics → Toggle OFF ⚠ Google TV’s core data collection cannot be fully disabled — a separate and ongoing privacy concern
📸 Sony Bravia — TWO separate privacy layers. Both must be disabled independently. Most users only do one and miss the other.
Layer 1 — Sony’s own ACR:
Settings › Device Preferences › Sony BRAVIA Privacy Policy › Simitless / Viewing Data › Opt Out OFF
Layer 2 — Google TV:
Settings › Privacy › Ads › Opt out of Ads Personalization OFF
Settings › Privacy › Usage & Diagnostics › Toggle OFF OFF
🟠 TCL / Hisense / iFFalcon — Disable SambaTV ACR
TCL/Hisense — SambaTV Consent Screen (Actual Popup During Setup) Smart TV Experience Powered by SambaTV • Built into 40+ million TVs SambaTV identifies content on your screen to enable personalised recommendations and cross-device advertising. Smart TV Experience (SambaTV) ← DISABLE Sends fingerprints of everything on screen to SambaTV’s servers Path: Settings → Privacy → Smart TV Experience → Toggle OFF Can be disabled here or from Privacy settings after initial setup 🇨🇳 Chinese-owned company — data may be accessible under China’s National Security Law
📸 TCL/Hisense “Smart TV Experience” — this SambaTV popup appears during setup. Most users click Accept without reading it.
Settings › Privacy ›Smart TV Experience (SambaTV)› Toggle OFF OFF
🇨🇳
India Alert — TCL, Hisense, iFFalcon UsersThese are Chinese-owned brands. Under China’s National Security Law, they can be compelled to share your viewing data with the Chinese government. iFFalcon — popular in India — is a TCL subsidiary running the same SambaTV ACR system.
🟣 Roku TV — Disable “Use Info” (ACR)
Roku TV — Smart TV Experience Settings ◀ Smart TV Experience Roku OS 12.x Use Info ← THIS IS ROKU’S ACR Allows Roku to scan and identify everything on your screen. Powers “More Ways to Watch” feature. TURN OFF ↑ Enable Auto Notifications Automatically disabled when “Use Info” is turned off Microphone Access Settings › Privacy › Voice → Set to “Never Allow” Also: Privacy Choices → “Opt out of data sharing and sale” — fill this in separately
📸 Roku “Use Info” is the ACR toggle. Turn OFF. Also set Microphone to “Never Allow” under Privacy › Voice.
Settings › Privacy › Smart TV Experience ›Use Info› Uncheck OFF
Settings › Privacy › Voice › Microphone Access › “Never Allow” OFF
⚫ Xiaomi / OnePlus / Vu Smart TV
Settings › Privacy › Permission Manager › Review and revoke all non-essential app permissions
Settings › Advanced › Usage & Diagnostics › Toggle OFF OFF
Settings › About › Legal › User Data Authorization › Revoke All Non-Essential OFF
PatchWall (Xiaomi India): Settings › Home Screen Preferences › Disable Personalized Recommendations.
⚠️
India-specific concernXiaomi Smart TVs in India run PatchWall — a separate content targeting layer. Data may be processed via China-linked servers. Consider isolating the TV on a separate WiFi SSID.
💰 Why Are Smart TVs So Cheap? The Real Model
A 43-inch Full HD Smart TV for under ₹20,000? Because you are not just the customer — you are the product. Manufacturers earn minimal margin on hardware. Real money comes from selling your viewing data.
🛒
You Buy TV
₹15k–₹60k
Low profit for maker
👁️
TV Watches You
ACR runs 24/7
Full profile built
📦
Data Packaged
Demographics, interests
Cross-device ID linked
💸
Data Sold
Revenue > Hardware
Vizio proved it publicly
📊
Vizio’s public earnings reports showed data revenue regularly exceeded hardware margins. You pay once for the TV — then you pay indefinitely with your privacy. The hardware is subsidised by surveillance.
🔒 Advanced: Network-Level Protection
Settings alone may not be enough — some ACR systems continue partial tracking even after opt-out. For serious protection:
1
Set Up Pi-hole (Router-Level DNS Blocking)Install Pi-hole on a Raspberry Pi. It auto-blocks all DNS queries to known ACR servers — works network-wide without touching TV settings.
2
Isolate TV on a Separate Guest WiFiCreate a dedicated SSID for your TV. Allow only streaming service IPs. This alone cuts off most ACR data exfiltration with zero technical complexity.
3
Block Known ACR Domains at RouterLG: log.alphonso.tv | Samsung: samsungacr.com | SambaTV: data.samba.tv
4
Use Apple TV 4K as Your Streaming DeviceApple confirmed no ACR on Apple TV 4K. Connect via HDMI — use the Smart TV as a dumb screen only. Avoid its native OS entirely.
✅
CyberRishabh Quick Win: Just connect your Smart TV to a separate guest WiFi SSID. One router setting, takes 2 minutes — significantly limits ACR’s ability to send data out.
✅ Quick Action Checklist
1
Find and disable ACR on your TV brandSee the brand guide above. Look for “Viewing Information Services”, “Live Plus”, “SyncPlus”, or “Use Info”.
2
Turn off Voice Recognition & Microphone AccessAlways-on voice = always-on surveillance. Enable only when actively needed.
3
Opt out of Interest-Based AdvertisingEvery brand has this — “Do Not Sell My Data” or “Opt Out of Ads Personalization”.
4
Never use Smart TV as an external work monitorACR can fingerprint confidential documents, presentations, and browser content visible on screen.
5
Move TV to separate Guest WiFi (recommended)Isolates it from your main network. Prevents ACR from phoning home even if the setting re-enables.
📝 Conclusion
Your Smart TV is a remarkable device — but embedded within it is a surveillance system that manufacturers deliberately obscure. ACR is a real, documented, court-proven privacy threat. Texas courts have issued restraining orders against Samsung and Hisense because of it.
Open your TV settings today. Follow the brand-specific guide above. It takes 10 minutes. The privacy protection lasts a lifetime.
“If a product seems too cheap, you are the product.”
💬
Want the full video walkthrough? Comment “ACR” below — I’ll send you a step-by-step video guide for your specific TV brand. Mention your brand name for a personalised response.
👨💻
Rishabh Pandey
Red Team Leader · Cybersecurity Architect
OSCPCEHECIHCISSPCRTPCRTOCRTE
Creating cybersecurity awareness and education content for Indian audiences through CyberRishabh. Mission: Making digital self-defence accessible to every Indian.