Samsung Smart TV Privacy Claims: Always-On Listening or ACR Ad Tracking?

Privacy concerns around Samsung smart TVs are back in the spotlight. A researcher claims to have found systems on a 2025 Samsung television that listen continuously and track viewing for advertising. The two halves of that claim don't carry equal weight, and you can't really understand the actual privacy problem with smart TVs until you separate them.

What happened?

A security researcher says the 2025 Samsung TV they examined runs background components capable of listening to audio, and that it tracks viewing habits for advertising. So far, nothing in the public record independently confirms that this always-on listening results in audio being sent to the cloud. Samsung hasn't publicly responded to the claims in any technical detail either.

Why does it matter?

Two separate technologies need to be pulled apart. The first is the voice assistant. Devices with Bixby or Alexa built in keep the microphone active locally so they can catch the wake word. That processing usually happens on the device itself, and by design, no audio should go to the cloud until the wake word is detected. A listening process running in the background doesn't mean conversations are being recorded and sent anywhere. Proving that would take network traffic analysis.

Samsung's record here isn't spotless, though. The company's 2015 privacy policy warned that anything said during a voice command could be passed on to a third-party service. That one sentence cemented the idea that "your TV is listening to you," and that memory is part of why the new claims spread so quickly.

The second technology, ACR (automatic content recognition), isn't speculation. It's a documented business model. The TV regularly takes small fingerprints of whatever is on screen and matches them against a database. That's how it can tell what you're watching, whether it comes from cable, a game console plugged into HDMI or a set-top box. Samsung, LG, Vizio and the other big manufacturers all use it. In 2017, Vizio had to settle with the US Federal Trade Commission (FTC) for collecting this data without explicit consent.

Why do smart TV makers collect data?

The answer lies in profit margins. The TV panel market has become commoditized, driven in particular by price pressure from Chinese manufacturers. As profits from hardware sales got thinner, manufacturers shifted their revenue to what happens after the device is sold. That money comes from free ad-supported channels (FAST), sponsored placements on the home screen and viewing data sold for targeted advertising. Samsung TV Plus and Samsung Ads are part of this strategy. Vizio, for its part, has been telling investors openly for years that its platform revenue outstrips its device profits.

Under this model, the cheap TV becomes a data collection point. You pay for the device, and then the time you spend in front of the screen gets monetized separately.

What does KVKK say for users in Turkey?

Viewing habits count as personal data as long as they can be linked to a household or an individual. Under Law No. 6698 on the Protection of Personal Data, the data controller has a duty to inform. Profiling for advertising generally requires explicit consent as well. Text crammed behind a single "Accept" button on the setup screen, which people click through without reading, struggles to meet that bar, because explicit consent is expected to be specific and informed. Transferring the data to servers abroad raises a separate compliance question.

In practice, what users can do is clear: turn off the "viewing information" or ACR options in the privacy settings, opt out of ad personalization and disable the microphone if they don't use the voice assistant. These settings sit in different places depending on the model and software version, and that scattering is a design choice in its own right.

What's next?

There are three things to watch. First, whether the researcher publishes their network traffic logs. If they show audio data leaving the device, the debate moves somewhere else entirely. Second, how regulators respond. In the US, state-level legal action against ACR is on the agenda, while in Europe, GDPR enforcement is slowly reaching into this area. Third, whether manufacturers switch to having consent turned off by default.

My take: the "your TV is secretly listening to you" headline is, for now at least, getting ahead of the evidence. But the noise also obscures a real problem. The main data flow comes from the screen, not the microphone. That flow may be legal and documented, but most users never knowingly agreed to it.