SipCyber - Presented by IT Audit Labs

Your Smart TV Is Spying on You (Fix It in 5 Minutes)

IT Audit Labs Season 1 Episode 37

Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.

0:00 | 4:51

Your smart TV shipped with privacy settings nobody reads and most people never change. In this episode of SipCyber, Jen Lotze visits Revelry Brewing on Folly Beach, South Carolina, to unpack one of the most overlooked data collection features in the average American home: Automatic Content Recognition, or ACR. 

ACR doesn't just track what you stream on Netflix. It identifies everything appearing on your screen — cable channels, gaming consoles, HDMI-connected devices — and uses that data to fuel advertising profiles and recommendation engines. It was on when you unboxed the TV. Most people have no idea. 

Key Topics Covered:  

  • What Automatic Content Recognition (ACR) actually does — and why it's enabled by default 
  • How smart TVs track cable, HDMI, and gaming content, not just streaming apps   
  • Brand-by-brand privacy settings to review: Samsung, LG, Roku, and Vizio  
  • Why enterprise conference rooms and waiting room displays carry the same risk   
  • The broader principle: intentional data sharing vs. invisible collection 

This one isn't about stopping a hacker. It's about understanding the technology already sitting in your living room — and making an informed choice about what it knows. 

☕ Featured Brewery: Revelry Brewing, Folly Beach, SC 

Five minutes. That's all it takes. Subscribe for weekly cybersecurity awareness from the best local spots across the country — and share this with someone who's never touched their TV's privacy settings. 

#SmartTV #Privacy #ACR #AutomaticContentRecognition #Cybersecurity #DataPrivacy #InfoSec #SmartHome #SipCyber #DigitalSafety #CyberAwareness #TVPrivacy #ConnectedDevices 

Jen Lotze

Hey there, coffee lovers and internet explorers. Welcome back to Sip Cyber, where we're always searching for two things the perfect cup of coffee and the simplest way to keep your digital life safe. The opening between the buildings didn't look like it led anywhere special. Then the space opened up. The whole place felt like someone had looked at an overlooked piece of space and imagined something better for it. That was my first impression of Revelry Brewing on Folly Beach in South Carolina. My husband and I found a table and settled in for one of our favorite traditions, our long-running game of gin. Now at this point, we've probably played more than a thousand hands altogether, maybe more. We've been playing long enough that neither of us remembers exactly when we started. I ordered a mojito that fit the afternoon perfectly. Cold, refreshing, plenty of mint and lime, the kind of drink that makes you slow down, whether you plan to or not. And that's what stayed with me about Revelry Brewing. Not the drinks, not the beach, the pace. Nobody seemed rushed, nobody seemed interested in optimizing the afternoon or syncing up or pinging each other. People were simply enjoying where they were. We played hand after hand and talked about life, work, family, and all the little things that fill our days. At one point, my husband updated our running spreadsheet for our game of gin. Yes, we actually have a spreadsheet. After more than a thousand hands, we've tracked wins and losses in a Google Sheet for years. And I, just for the record, am winning. Just to be clear. And honestly, tracking is part of the fun. We chose to collect that information. We know what's in it. We know why we're tracking it. So I know I'm better. We know who has access to it. So sitting there at Revelry Brewing, that distinction got me thinking. Because there's a big difference between the information we intentionally collect and the information that's collected without us ever really noticing. Thinking about our smart TVs. Many smart TVs work differently. One feature that surprises a lot of people is called automatic content recognition or ACR. In simple terms, ACR helps the television identify what's appearing on the screen, not just Netflix or Hulu, everything. Cable channels, gaming consoles, even devices connected through HDMI. The TV uses that information to understand viewing habits and help power recommendations, advertising, and other services. Most people never turned it on. It was already on when they bought the TV. And that's where the parallel to our GIN game and our spreadsheet ends. One was intentional, one was a default. The interesting thing is that many TVs don't stop with ACR. Depending on the brand, there may be settings for personalized advertising, viewing data collection, voice recognition, usage analytics, and even sharing information with recommendation engines that run quietly in the background. None of these settings are necessarily hidden, but they are easy to miss. Especially when you're excited to get that new TV connected and start watching right away. That brings me to one small step that helps. Set aside five minutes this week and review the privacy settings on your smart TV. If you have a Samsung TV, look for a setting called viewing information services and review any interest-based advertising settings. LG users can check for Live Plus, voice information, and interest-based advertising. If your TV runs Roku, review Smart TV Experience and enable limited ad tracking. Visio owners should look at viewing data and smart interactivity settings. The names may be different, but the goal is the same. Understand what information is being collected and make a conscious decision about what you're comfortable sharing. For business owners, the same principle applies to conference room TVs, waiting room displays, and other connected screens around the office. Those devices often arrive with default settings that nobody reviews after installation. They often just put them right on the Wi-Fi. Not your best plan. Cybersecurity isn't always about stopping a cyber criminal. Sometimes it's about understanding the technology we've already invited into our lives. As we packed up our cards and finished our drinks, my husband updated the spreadsheet one last time, still with me winning. Another hand added to a record we've intentionally built together over the years. My mojito was gone, the afternoon was winding down, the conversations around us were still moving at that same easy pace, and I found myself appreciating the difference between information we choose to share and information we never realized we were sharing at all. Maybe that's a good reminder for our digital lives too. Trust works best when it's intentional. Whether it's a Google sheet tracking a thousand hands of gin or a device sitting quietly in the corner of your living room, it's worth knowing what information is being collected and why. Sometimes the smartest thing we can do is slow down long enough to take a closer look. Thanks for joining me today on this trip to Revelry Brewing and for taking a small step to secure digital life. Until then, stay safe, stay human, and keep sipping.