SARATH THARAYILHS.T.[W] WRITEUPSWWRITEUPS[P] PROJECTSPPROJECTS[A] ABOUTAABOUT
മ
/ SYSTEM

Building thoughtful software, writing notes, and shipping experiments across data, AI, and the web.

No cookies, no tracking. Preferences are stored locally in your browser. Anonymous view counts are kept server-side.

© 2026 Sarath Tharayil/IST --:--:--
++++

Your TV Is Taking Screenshots. Here Is Exactly What That Means.

Your TV Is Taking Screenshots. Here Is Exactly What That Means.

/ METADATA
DATE:2026.5.1
AUTHOR:SARATH THARAYIL
READING TIME:20 MIN READ
ENGAGEMENT:--
CATEGORIES:
PrivacyTechnologySecurity
NAVIGATE:← GO BACK
2026.5.1·20 MIN READ← back
PrivacyTechnologySecurity
/ ARTICLE

The television in your living room is taking screenshots of everything on its screen and sending them to corporate servers. Not occasionally. Not when you use certain apps. Continuously, automatically, and by default, whether you are streaming Netflix, playing a video game through an HDMI cable, or watching a Blu-ray disc on an external player.

This is not a theory or a speculative privacy concern. It is a documented, academically studied, legally litigated commercial practice called Automatic Content Recognition. It is active on virtually every major smart television brand sold today. And the vast majority of people who own these televisions have no idea it is happening.

This is the full story: what the technology actually does, which brands do it, how much money it makes, and what you can do about it.


What is Automatic Content Recognition

Automatic Content Recognition, almost universally abbreviated as ACR, is software embedded at the operating system level of smart televisions. It works by continuously analyzing the audio and video output on the screen, generating compact digital fingerprints of what it sees and hears, and sending those fingerprints to remote servers where they are compared against a massive database of commercial content.

When there is a match, the server knows exactly what you were watching, on which device, at what time, and at what precise moment during the program or advertisement. That information is logged against your television's identifier, which is tied to your IP address and geographic location.

The conceptual model is similar to Shazam, the app that can identify a song playing in the background by listening to a few seconds of audio. ACR does the same thing, but it runs in silence, in the background of your television's operating system, without ever asking for permission on a per-use basis, and it never stops.

Important

ACR is source-agnostic. It does not matter whether you are using the TV's built-in apps, an external streaming stick, a gaming console, a laptop via HDMI, a Blu-ray player, or a USB flash drive. The ACR engine analyzes whatever is on the screen. The source is irrelevant.


The fingerprinting process: how screenshots become data

The common framing of ACR as "taking screenshots" is not entirely precise but it captures the essential truth. Here is what actually happens.

The television periodically captures either raw pixel data from the screen buffer or brief audio samples from the output signal. Transmitting actual high-resolution video frames every few seconds would consume enormous bandwidth and would be immediately obvious to any user monitoring their network traffic. So instead, the TV uses proprietary compression algorithms to convert those captures into digital fingerprints: extremely compact mathematical representations of the visual or acoustic content at a specific moment.

A video fingerprint is generated by analyzing color gradients, pixel arrangements, and frame transitions and compressing that analysis into a short alphanumeric string. An acoustic fingerprint takes the audio wave and generates a unique hash that is entirely agnostic to file format, codec, or compression. The same song sounds like the same fingerprint whether it is on a CD, a streaming service, or a YouTube video.

The TV transmits these lightweight fingerprints over your home Wi-Fi to ACR servers, which run high-speed comparisons against databases containing millions of pre-computed fingerprints for broadcast television, streaming content, movies, and advertisements. When the server finds a statistical match, it logs the event: this specific television, at this specific IP address, was displaying this specific piece of content at this exact time.

Why your actual video never leaves your home

The raw video file is never uploaded. The fingerprint is a one-way compression: a tiny mathematical summary that allows identification against a known database, but cannot be reversed to reconstruct the original image. However, this does not make the surveillance less real. The act of capturing, hashing, and transmitting derived data about private on-screen content to a corporate server is the privacy violation, regardless of whether the raw pixels travel.


Which brands, and how aggressively

Every major television brand ships with ACR active. What varies is how frequently the data is captured and transmitted.

A 2024 peer-reviewed study by researchers at the University of California Davis, University College London, and Universidad Carlos III de Madrid, published in the Proceedings of the ACM Internet Measurement Conference, intercepted and analyzed the encrypted telemetry traffic leaving Samsung and LG televisions in the US and UK. The findings were stark.

BrandOperating SystemACR Capture RateTransmission RatePackets Per Hour
SamsungTizen OSEvery 500ms (2 captures/sec)Batched, sent every 60 sec60
LGwebOSNot separately disclosedEvery 15 seconds240
SonyGoogle TV / Android TVVia Samba TV (third party)Continuous matchingNot disclosed
TCL / HisenseRoku OSPer HDMI inputContinuousNot disclosed
VizioSmartCastContinuousContinuousNot disclosed

The Samsung figure deserves emphasis. Two visual captures per second means 7,200 individual snapshots per hour of viewing. Those are batched and sent as 60 telemetry packets, but each packet contains a dense compilation of data describing everything on your screen across that 60-second window.

The LG figure has a different character: 240 separate transmissions per hour means more frequent communication with the server, each containing a single fingerprint from a 15-second window. Both approaches deliver granular, continuous surveillance. They just implement it differently at the software level.

Samsung

7,200 captures/hour

One visual snapshot every 500 milliseconds. Batched into 60 transmissions per hour, each covering a full minute of viewing.

LG

240 packets/hour

A distinct fingerprint transmitted every 15 seconds. Four times more frequent server communications than Samsung.

Both

Always on by default

Active from the first setup. Persists through HDMI inputs, USB playback, and external devices. No opt-in required.


HDMI, gaming consoles, and the source-blindness problem

The most consequential misunderstanding about ACR is the belief that it only activates when you are using the television's native applications. A reasonable assumption, but completely wrong.

Because ACR analyzes the final pixels rendered on the physical display, it captures everything that crosses the screen regardless of how it got there. The UC Davis and UCL researchers explicitly confirmed that ACR network traffic continues identically whether the user is watching a native streaming app or using the television purely as an external monitor via HDMI.

The practical implications are serious:

Gaming consoles. A PlayStation, Xbox, or Nintendo Switch connected via HDMI is fully monitored. The television captures and fingerprints game visuals in exactly the same way it captures a television broadcast.

Laptops and work monitors. Professionals who use large smart televisions as secondary monitors for their computers are subjecting their screen contents to the same ACR pipeline as a casual viewer watching a movie. Confidential documents, video editing timelines, proprietary source code, and private correspondence displayed on the screen are processed by the fingerprinting algorithm and transmitted as cryptographic representations to external servers.

Physical media. A DVD or Blu-ray playing on an external disc player connected via HDMI is treated identically to a Netflix stream. The ACR engine does not know or care that the content comes from a physical disc you own.

Corporate environments face specific risks

Using an ACR-enabled television as a client presentation screen, a creative grading monitor, or a boardroom display means the television is actively attempting to identify and catalog everything shown on it. Work protected under NDAs is processed by manufacturer algorithms and transmitted to third-party servers. The fingerprint is a one-way hash, but the act of surveillance still occurred.


Your personal videos are not safe either

Think about what you keep on a USB drive. A video from your daughter's first birthday. A recording of a parent who has since passed. A home video from a holiday ten years ago that exists nowhere else. You plug the drive into the television, the big screen, because that is what the television is for. You want to watch it properly.

The ACR engine starts scanning immediately.

It has no mechanism to distinguish between a Marvel blockbuster and a video shot in your living room. To the fingerprinting software running in the background, both are just pixels at a known interval. As your personal video plays, the television generates hashes of the frames and transmits them to the ACR server, exactly as it would for a Netflix show or a cable broadcast.

The server receives those fingerprints and queries its database. It finds nothing. Your family video is not in any commercial content library. The hash goes unmatched and is discarded, not out of respect for your privacy, but because there is no advertiser who will pay for an unidentified private clip. Unmatched fingerprints have no commercial value.

The raw video file itself is never uploaded. Transmitting actual video would consume enormous bandwidth and would be architecturally pointless for a system built around database matching.

But that framing, that the video was not uploaded and the hash was discarded, is where manufacturers would like the conversation to stop. It should not stop there.

“

The television scanned private footage of your family, generated a cryptographic representation of those images, and transmitted it to a corporate server. The server failed to monetize the event and discarded the data. The scanning still happened. The transmission still happened. The boundary between your private memories and a remote commercial server was crossed, without your knowledge, by hardware you paid for and placed in your home.

”

What makes this the sharpest version of the ACR story is not technical complexity. It is the gap between what the moment means to you and what it means to the surveillance pipeline. You are watching your daughter take her first steps. The television is running an identification query against a Samsung server. Both things are true at the same time, and only one of them was your choice.


The business model: how much money this actually generates

ACR is not a background feature that manufacturers tolerate for product improvement purposes. It is the economic foundation of the modern television business. Understanding the money involved explains why the surveillance is so aggressive and why disabling it requires navigating deliberately obfuscated menus.

The underlying economics work like this: manufacturers sell television hardware at extremely thin margins or at a loss. The ACR pipeline, once the device is in a home, generates recurring data revenue for the entire lifespan of the device. The television is effectively a subsidized sensor deployment.

Vizio has built a major secondary business from its SmartCast advertising and data platform. In early 2024, Walmart acquired Vizio for $2.3 billion. The acquisition was not driven by an interest in manufacturing displays. Walmart wanted direct access to Vizio's ACR-powered viewing data ecosystem, which would allow the retail giant to connect television viewing habits to purchase behavior across hundreds of millions of households.

Samsung operates an ad-supported ecosystem with an estimated 88 million monthly active users globally. The scale of this data collection operation gives Samsung a dominant position in the connected-TV advertising market, generating billions in annual revenue from behavioral profiles built on continuous ACR monitoring.

LG Ad Solutions markets its data as "currency-grade TV viewership data" captured from hundreds of millions of devices, explicitly advertising its ability to unify linear and streaming audience insights for advertisers.

CompanyRevenue StreamScale
Vizio (acquired by Walmart, 2024)SmartCast advertising and data$2.3B acquisition price
SamsungConnected TV advertising ecosystem88M monthly active users
LG Ad SolutionsAudience data platformHundreds of millions of devices
Samba TVThird-party ACR for Sony and othersServes multiple manufacturers simultaneously
The Trade Desk, MagniteProgrammatic advertising buying ACR audiencesMulti-billion dollar market

The cross-device advertising mechanism that this data powers is the final piece of the picture. When ACR logs that a household watched a specific car advertisement, the advertising network ties that to the household's IP address. Minutes later, when someone in that household opens Instagram or Chrome on their phone, the network serves a follow-up advertisement for the exact same car. The connection between what appeared on the television and what appears on the phone is the ACR data.


The names they give it: a guide to manufacturer euphemisms

Perhaps the most telling evidence of how manufacturers regard ACR is the terminology they use for it in their settings menus. Without exception, every major brand has assigned their ACR tracking a name specifically designed to sound like a user-facing feature rather than a surveillance mechanism.

BrandEuphemistic NameWhat It Actually Does
SamsungViewing Information ServicesContinuous pixel capture and fingerprinting at 2x per second
LGLive PlusACR fingerprinting every 15 seconds
SonySamba Interactive TVThird-party ACR via Samba TV data broker
TCL / HisenseSmart TV ExperienceFingerprinting across all HDMI and USB inputs
VizioViewing DataContinuous SmartCast telemetry pipeline

The logic of these names is transparent once you see it. "Live Plus" sounds like an enhancement to your live television experience. "Smart TV Experience" sounds like a core feature of the product's intelligence. "Viewing Information Services" sounds as though the TV is providing you with information about your viewing, not the reverse. None of these names communicate, even obliquely, that the function captures what is on your screen and transmits fingerprints of it to external servers.

These labels are almost always enabled by default. The entire consent architecture relies on users rapidly clicking through setup agreements to access their new hardware without reading what they are agreeing to.

The Legitimate Interest trap

In Europe and in any setting that mirrors GDPR-style privacy controls, manufacturers add a second layer of tracking that persists even after you disable the main ACR toggle. It is hidden under a tab labeled "Legitimate Interest," where the manufacturer claims advertising and product development as a legal justification that overrides the need for consent. Disabling it requires navigating to a separate settings area and manually unchecking each of potentially dozens of individual third-party advertising partners, one by one, with no "Reject All" option. The friction is intentional.


The legal crackdown: what Texas did

The most significant regulatory challenge to ACR came in December 2025, when Texas Attorney General Ken Paxton filed lawsuits against five major television manufacturers simultaneously: Samsung, LG, Sony, Hisense, and TCL.

The lawsuits did not accept the industry framing of ACR as a consensual opt-in feature. Instead, they categorized the technology as an uninvited surveillance mechanism and charged each manufacturer with unlawfully collecting and monetizing television-viewing data in violation of state consumer protection law.

Paxton officially described the technology not as software but as "watchware," a deliberate reframing intended to emphasize its character as a surveillance tool embedded in consumer hardware.

The national security dimension of the litigation drew particular attention. Hisense and TCL are Chinese corporate entities subject to Chinese national intelligence laws, which can compel domestic companies to hand data to the Chinese government upon request. The Attorney General's office secured temporary restraining orders against both companies, blocking specific ACR collection practices within Texas, and Paxton stated publicly that companies with CCP ties "have no business illegally recording Americans' devices inside their own homes."

In February 2026, Samsung settled with the Texas Attorney General. Under the terms of the agreement:

  1. 01
    Samsung must cease ACR collection from Texas residents without explicit, informed consent.
  2. 02
    Samsung must completely rewrite its on-screen privacy prompts to accurately describe what "Viewing Information Services" does.
  3. 03
    The new disclosures must explicitly state that the system captures imagery every 500 milliseconds to deliver behavioral insights to third-party advertisers.
  4. 04
    The previous consent screens, which falsely implied the feature existed to personalize the user's viewing experience, are prohibited.

Samsung simultaneously faces federal class-action lawsuits in New York alleging violations of the Video Privacy Protection Act. Litigation against LG, Sony, Hisense, and TCL in Texas is ongoing.

This is not the first major legal action against TV ACR. In 2017, the Federal Trade Commission fined Vizio $2.2 million for tracking 11 million users without consent. Vizio was required to delete all previously collected data and implement an opt-in framework. The company subsequently rebuilt its data collection on what it characterized as opt-in consent mechanisms, and the data platform now generates enough revenue to attract a $2.3 billion acquisition bid.


How to turn it off: brand by brand

Every manufacturer's ACR can be disabled. None of them make it straightforward. These are the steps for each major platform.

  1. 01
    Open Settings from the main menu.
  2. 02
    Navigate to Support, then open Terms and Privacy (labeled "General and Privacy" on some 2024 and 2025 firmware versions).
  3. 03
    Enter Privacy Choices.
  4. 04
    Uncheck "Viewing Information Services." This stops the core ACR pixel-hashing engine.
  5. 05
    In the same menu, disable "Interest-Based Advertising" to prevent use of previously collected profile data.
  6. 06
    Disable "Voice Recognition Services" to stop ambient audio from the remote control being transmitted to external servers.

Menu labels and paths vary by model year and firmware version. If something doesn't match your screen, search your model number alongside "disable ACR" or "disable viewing data."

Firmware updates can silently reset your settings

Manufacturers periodically push firmware updates that can introduce new privacy agreements or reset user privacy toggles back to their defaults. After any major firmware update, check these settings again. This is not hypothetical: multiple users have documented their ACR settings being re-enabled following manufacturer updates.


The nuclear option: cutting the network entirely

Disabling ACR in the software settings is the right first step. But it relies entirely on trusting the manufacturer to respect that toggle, and the legal record suggests that trust is not always warranted.

The most reliable solution is to disconnect the television from the internet entirely.

During the initial setup, when the TV asks you to connect to Wi-Fi or Ethernet, skip that step. This puts the television into what is sometimes called "Basic TV" mode: it renders whatever you connect to it via HDMI without any operating system telemetry pipeline.

For streaming functionality, connect an external device via HDMI. The Apple TV hardware, for example, operates under a different business model. Apple monetizes hardware sales and subscription revenue rather than behavioral data. The Apple TV does not perform glass-level ACR fingerprinting. Individual streaming apps installed on it, such as Netflix or Hulu, will track viewing within those apps, but private HDMI inputs, local files, and gaming consoles on other HDMI ports are not monitored by the hardware.

This setup gives you a high-quality display with full streaming capability, without granting the display manufacturer continuous access to everything on the screen.

For users who need the TV online: network-level blocking

If you need the television connected to the internet for specific functionality that cannot be replicated on an external device, the next layer of defense is blocking ACR traffic at the router level.

A DNS sinkhole such as Pi-hole, running on a Raspberry Pi on your local network, can intercept and block outbound requests from the television to known ACR server domains. Hardware firewall appliances from pfSense, OPNsense, or Firewalla allow more granular rules: once the television's IP address is identified, traffic from that address to specific domains can be permanently dropped.

One important caveat documented by network administrators: some television models, particularly Roku-based devices and certain Vizio models, respond to persistent network blocking by aggressively retrying their telemetry connections. In some observed cases this retry behavior has caused the television's networking stack to effectively crash, requiring a physical power cycle to restore basic functionality. The behavior illustrates how critical continuous telemetry is to the manufacturer's architecture.

A practical combined approach

The most robust setup for most people: disconnect the TV from the internet entirely, connect an Apple TV via HDMI for streaming, and treat the television itself as a dumb display. This eliminates manufacturer-level ACR entirely while maintaining full access to streaming services, each of which will track viewing within their own apps as they always have.


What this actually means

The transformation of the television from a passive display into a continuous data-harvesting device is not a future concern or a theoretical risk. It is the present reality for anyone who owns a modern smart television and has not taken explicit steps to stop it.

The scale is difficult to internalize. Samsung alone has 88 million active users generating continuous telemetry. Multiply that by two captures per second, every hour someone is watching, and the data volume is staggering. Each of those data points feeds advertising profiles that follow you across every device connected to your home network.

The legal situation is moving. Texas established a meaningful precedent with the Samsung settlement, and the ongoing litigation against four other major manufacturers will either extend that precedent or reveal its limits. But legal victories in one state do not change default settings on televisions sold globally.

The uncomfortable practical reality is this: the privacy settings in these televisions were designed to be ignored. The names are opaque, the defaults are maximally invasive, the menus are buried, and the firmware updates can undo what you set. The manufacturers have powerful financial incentives to maintain the pipeline and very little structural incentive to make it easy to opt out.

The information is in this post. The steps are specific and they work. Whether the burden of actively reclaiming privacy from hardware you purchased and placed in your own living room should fall entirely on you is a separate question. It should not. But right now, it does.

If this was worth sharing, send it to someone on 𝕏 or LinkedIn. Got a question or a thought? Drop me a message — I read everything. If this was worth your time, .

Sarath Tharayil
/ SEE ALSO
How Your Wi-Fi Can See Through WallsApr 30, 2026The Country That Got Lucky With Two LettersApr 30, 2026Why Things Work Badly, Strangely, or Unexpectedly in Modern LifeApr 28, 2026
/ CONTENTS(11)
What is Automatic Content RecognitionThe fingerprinting process: how screenshots become dataWhich brands, and how aggressivelyHDMI, gaming consoles, and the source-blindness problemYour personal videos are not safe eitherThe business model: how much money this actually generatesThe names they give it: a guide to manufacturer euphemismsThe legal crackdown: what Texas didHow to turn it off: brand by brandThe nuclear option: cutting the network entirelyWhat this actually means
--
/ THAT'S A WRAP

Have a great day.

Thanks for reading all the way to the end.