Northeastern Study: Samsung, Vizio, Roku TVs Keep Sending ACR-Like Traffic After Opt-Out

3.4 · 10d ago · US · TECH

The Facts

  • Northeastern University researchers published a paper, 'Watching the Watchers: Privacy Analysis of US Smart TV Automatic Content Recognition,' on Monday. Ars Technica only
  • The study examined eight smart TV operating systems across 12 TVs from 10 manufacturers (Amazon, Hisense, LG, Roku, Samsung, Sony, Supersonic, TCL, Vizio, Westinghouse) and ran 5,943 controlled experiments. Ars Technica only
  • TVs running Samsung Tizen, Vizio OS and Roku OS continued sending network traffic to their ACR endpoints after tracking was disabled in settings. Ars Technica only
  • On Roku OS, the behavior occurred only in the integrated Roku Channel app; it is disclosed in Roku's terms of service and, per the report, in settings on TCL-branded TVs. Ars Technica only
  • On Tizen, ACR-consistent traffic persisted after opt-out in all 30 first-party streaming app measurements, 41 of 60 antenna measurements, and 18 of 30 HDMI measurements. Ars Technica only
Dive deeper · 4 more factsShow less
  • On Vizio OS, a content-correlated endpoint hosted on Amazon Kinesis received traffic in 100 percent of opted-out scenarios, including when TVs were idle; traffic stopped with third-party streaming apps and screen mirroring, consistent with Vizio's 2021 SEC filing. Ars Technica only
  • Encryption prevented researchers from determining the contents of the traffic; the report says it indicates potential privacy violations but this cannot be confirmed without payload access. Ars Technica only
  • Lead author Ilgar Mammadov said the tested OSes cover about 95 percent of those used in the US, and that results should not be generalized to ACR providers outside the study. Ars Technica only
  • Ars Technica contacted Samsung and Vizio for comment; no response was reported. Ars Technica only

Context

Automatic content recognition (ACR) captures screenshots or audio clips from smart TVs and sends them to remote servers for viewership measurement and targeted advertising. The Northeastern University study found network traffic consistent with ACR continuing after users opted out on several brands' operating systems.

The researchers could not inspect the encrypted payloads, so they did not confirm what data was sent. They described the findings as suspicious and as potential privacy violations.

How the Agent Panel Scored This

Independent AI personas each scored importance 1–10; the story's score is a trimmed mean (highest and lowest votes dropped). Vote spread: 1.

4 Critical Reader A peer-reviewed academic study documents ACR-consistent traffic persisting after opt-out on several major smart TV platforms, a meaningful privacy finding, but it is unconfirmed (encrypted payloads), involves no regulatory or company action, and affects a niche technical audience in the near term.
4 Informed Citizen This is an academic study revealing that smart TVs from several brands keep sending ACR-like traffic after opt-out, a real privacy concern for many owners, but it reports no new enforcement action or confirmed data harm and is limited in immediate impact.
4 Science & Tech Analyst A peer-reviewed academic study with a concrete finding of ACR-like traffic persisting after opt-out on major TV brands is notable for privacy, but it is a niche research report with unconfirmed payload contents and limited immediate impact on consumers.
3 Global Affairs Analyst An academic study documenting network traffic persisting after opt-out on several TV brands is a niche privacy finding with no new regulatory action, enforcement, or broad immediate impact, and its payload contents remain unconfirmed.
3 Business Analyst This is an academic privacy study reporting concrete findings of continued ACR-like traffic after opt-out, but it is niche, unconfirmed (encrypted payloads), has no regulatory action, corporate action, or market-moving impact, and companies had not responded.
3 News Editor This is a niche academic privacy study reporting concrete but unconfirmed network traffic findings on a subset of smart TV brands, with no regulatory action, no confirmed data misuse, and no widespread immediate impact.
3 Policy Expert This is an academic study reporting that smart TVs continue sending network traffic after opt-out, with no enacted law, ruling, or regulatory action, and the researchers could not confirm what data was sent, so its impact is limited to a niche privacy-research finding with some consumer relevance.

Source

← All stories