IT Pro Expert
Search
IT · 15 Sep 2026 · 40 min read

How to buy a TV that is not listening to you, watching you and selling you as a product!

Learn how to buy a smart TV that respects your privacy. We compare TV operating systems and rank the best options that avoid spying on you.

Smart TV with lock icon on screen, illustrating how to buy a privacy-respecting smart TV

Television is the only product in your home that got cheaper, better and more invasive at the same time, and those three facts are connected. This is a buying guide for anyone who wants a good picture without handing over a record of everything that appears on the screen. However it turns out there is no such thing as a safe TV in 2026 but there are good solutions if you read on...

The panel is the loss leader. You are the margin.

Screen quality that would have cost four figures a decade ago now sells for a few hundred pounds, and the reason is visible in the accounts of the companies doing it. Roku's 2025 filings show platform revenue — advertising and content distribution — of roughly $4.14bn against $592m from hardware, and its device segment ran at a gross loss in 2024. Vizio, now owned by Walmart, reached the point where every penny of gross profit came from its advertising and data business while the televisions themselves lost money. Industry analysts have described Roku and Vizio selling sets at margins of minus three to minus seven per cent.

That model has spread. Samsung and LG both run substantial in-house advertising divisions. LG bought a controlling stake in the television data firm Alphonso, which became LG Ad Solutions. Even budget badges are in it now: the operating systems fitted to supermarket and catalogue brands are licensed from companies whose business is selling the resulting viewing data.

500mshow often ACR can capture the screen, per Texas court filings
70%of UK households have a smart TV, per the ICO
216mLG smart TVs worldwide, per LG Ad Solutions
87.5%of Roku's 2025 revenue came from platform, not hardware

Buy the panel. Don't buy the platform.

What the tracking actually does

Automatic content recognition

ACR is the main mechanism, and it works like Shazam for whatever is on your screen. The television periodically captures a frame or an audio sample, reduces it to a fingerprint, and sends that fingerprint to a server which matches it against a content library. The match tells the operator exactly what you are watching, second by second.

The important part for a buyer is that ACR sits in the operating system, below the apps. It is not confined to the manufacturer's own software. A peer-reviewed study presented at the 2024 ACM Internet Measurement Conference — run on a test bench in the United Kingdom as well as the United States — measured the traffic leaving Samsung and LG sets and found the heaviest flows during live aerial television and when the set was being used as a plain external display over HDMI.

How much ACR traffic leaves an LG set, by what you are doing. Kilobytes exchanged with LG's ACR endpoint during one-hour test runs on a UK test bench, with the television logged in and opted in. Source: Anselmi et al., ACM Internet Measurement Conference 2024 (UCL, UC Davis and Universidad Carlos III de Madrid). The figures measure traffic volume, not content. The Samsung set in the same study produced the same shape at lower volume on its fingerprint endpoint: live television and HDMI far ahead of everything else.
264.7
Idle
4759.7
Live TV, aerial
262.8
LG Channels
264.3
Streaming app
4296.5
HDMI source
266.2
Screen cast

Read that chart carefully, because it disposes of the most common assumption about smart televisions. Plugging a games console, a laptop, a cable box or a streaming stick into an HDMI port does not make the set a passive monitor. It fingerprints that too. The same study found that whether the user was signed in made no material difference, which suggests the tracking is keyed to the set's advertising identifier and network address rather than an account.

Microphones

Far-field microphones — the ones built into the television rather than the remote — are the feature worth checking on a spec sheet. Manufacturers generally describe wake-word detection as happening on the device, with audio discarded when no wake word is heard. Samsung's 2015 privacy policy is the historical marker here: it warned that spoken words including personal or sensitive information would be among the data captured and transmitted to a third party. Modern implementations are narrower, but the hardware is still in the room.

Cameras

Cameras have largely disappeared from consumer televisions but older TV's with cameras are still a high risk. The notable UK exception is Sky Live, an optional 12-megapixel camera that magnetically attaches to a Sky Glass set, with a 110-degree field of view and automatic subject and body tracking which has not been security tested yet but it certainly is intrusive.

The television as a route into your network

This is the part that should concern anyone responsible for a network rather than just a living room, and it gets far less coverage than the advertising story.

Modern televisions actively enumerate the local network. Manufacturers describe this as supporting connectivity and casting, which is a fair description of the intent. The September 2026 Gamers Nexus investigation reported LG sets scanning for unrelated hardware including phones and smartwatches belonging to people who were not involved in the testing, and logging the names and signal strengths of neighbouring wireless networks. LG says device discovery supports connectivity features and that nearby wireless data helps estimate approximate location when the relevant agreements have been accepted. Either way, the set holds a map of what else is on your network.

That matters because of what a television actually is: a long-lived Linux computer, rarely patched, frequently unsupported after a few years, sitting on the trusted side of your firewall. The vulnerability record is not reassuring. Bitdefender documented root-level flaws across LG's webOS versions 4 to 7, with more than 91,000 displays found exposed to the internet. Published vulnerabilities in TCL sets allowed an attacker on the adjacent network to retrieve system files including personal data and application security tokens. And the researchers working with Gamers Nexus reported remote-code-execution flaws to LG that, as of mid-September 2026, had not been publicly fixed.

A compromised television is not just a privacy problem. It is a foothold with a view of every other device in the house, and it is the one device nobody thinks to check.

The broadcast layer

One more mechanism, specific to Europe and rarely discussed. HbbTV, the standard behind the red-button layer on Freeview, is bidirectional by design. Research presented at NDSS in 2023 examined 36 channels across five European countries and concluded that the way the protocol is implemented can create serious privacy risks, with surveyed viewers showing little understanding of what they were exposed to.

What independent testing has established

  • The academic measurement. The 2024 IMC study confirmed ACR runs during live television and HDMI input, is unaffected by login status, and — importantly — that the opt-out controls on both Samsung and LG genuinely stopped all traffic to the ACR endpoints once exercised.
  • The reverse engineers. In September 2026 Gamers Nexus, working with Level1Techs and independent security researchers, published packet captures from retail LG OLED sets and reported local-network scanning, collection of neighbouring wireless network details, and microphone audio captured with the screen dark. LG denies that its televisions continuously record or transmit conversations and says voice features are off by default. The dispute is unresolved and should be read as such.
  • The litigation. The Texas Attorney General sued Samsung, LG, Sony, Hisense and TCL in December 2025 over ACR consent. Samsung settled in early 2026 and LG in May 2026, both agreeing to informed consent and clearer disclosure, LG explicitly without admitting liability. Hisense was placed under a restraining order. The Sony, TCL and Hisense cases remain live. These remedies apply in Texas, not here.
  • The UK regulator. In June 2026 the ICO finalised its guidance for consumer connected devices and said it would engage connected television manufacturers to assess whether they comply with the law and offer genuine consent. Penalties under PECR now align with the UK GDPR ceiling of £17.5m or four per cent of global turnover.
  • The gap between policy and practice. When the same researchers submitted subject access requests, the responses from the manufacturers were vague and did not correspond to the volume of data they had observed leaving the televisions.

How we scored each brand

Every score below is out of ten and reflects the privacy and security posture of the television as sold, before any settings are changed. These are our own editorial ratings, not measured values. We weighted five things.

  • Default behaviour. What the set does out of the box, and whether consent is meaningfully obtained during setup.
  • Who profits from the data. Whether the manufacturer runs its own advertising business, licenses the data to a third party, or does neither.
  • Opt-out quality. Whether the controls exist, can be found, and have been independently shown to work.
  • Jurisdiction and transparency. Where the data goes, what the privacy notice permits, and whether any independent audit exists.
  • Security record. Published vulnerabilities, patching behaviour and response to disclosure.

Thirty-six TV brands ranked for privacy and security (best to worst)

Each entry carries the platform it runs, which recognition system collects the viewing data and who ultimately receives it, whether collection is on out of the box, what microphone hardware is fitted, and any regulatory or research flags attached to the brand. Where a value reads "varies by model", that is the honest answer — several of these badges are licensed to more than one manufacturer, so the set in front of you may not behave like the one next to it.

1

Linsar

A UK brand with no advertising division we can identify and no first-party recognition platform. It also carries almost no independent security testing, so this is a score built on absence of evidence. Check which operating system the specific model ships with before you commit.

  • PlatformVaries by model
  • Recognition goes toNo first-party system; depends on the licensed platform
  • DefaultVaries by platform
  • MicrophoneRemote only on current models
  • FlagsNo independent privacy or security testing found.

6.0/10

Fair
2

Cello

Small-scale UK assembly with no data business of its own. The smart layer changes between models, so the set's actual behaviour depends on whose software is inside rather than on the badge.

  • PlatformVaries by model; UK assembly
  • Recognition goes toNo first-party system; depends on the licensed platform
  • DefaultVaries by platform
  • MicrophoneRemote; varies by model
  • FlagsNo first-party advertising business identified.

5.5/10

Weak
3

Loewe

Premium German brand with no advertising arm of its own. Google's platform-level collection still applies, and ad personalisation is on by default.

  • PlatformGoogle TV
  • Recognition goes toNo first-party system; Google platform data
  • DefaultAd personalisation on
  • MicrophoneRemote; Google Assistant
  • FlagsNone specific to the brand.

5.5/10

Weak
4

Bang & Olufsen

Same position as Loewe. Low volume, no first-party data business, but the underlying platform collects regardless of what you paid for the cabinet.

  • PlatformGoogle TV
  • Recognition goes toNo first-party system; Google platform data
  • DefaultAd personalisation on
  • MicrophoneRemote; Google Assistant
  • FlagsNone specific to the brand.

5.5/10

Weak
5

Grundig

Arçelik-owned and running Google's platform. No in-house recognition or advertising business, which is the whole of its advantage here.

  • PlatformGoogle TV
  • Recognition goes toNo first-party system; Google platform data
  • DefaultAd personalisation on
  • MicrophoneRemote; Google Assistant
  • FlagsNone specific to the brand.

5.0/10

Weak
6

Mitchell & Brown

A UK-market badge on Vestel hardware, so it inherits whichever platform Vestel fits to that chassis. Sold on long warranties rather than software, which is not a privacy feature but does mean fewer forced platform changes.

  • PlatformVestel-built; platform varies
  • Recognition goes toWhichever platform is fitted
  • DefaultOn, per fitted platform
  • MicrophoneRemote only
  • FlagsInherits Vestel's platform and data partnerships.

4.5/10

Weak
7

Medion

Aldi's electronics badge, historically built by Vestel. Platform varies by model and year, and there is little public documentation of what each one does.

  • PlatformVestel-built; platform varies
  • Recognition goes toWhichever platform is fitted
  • DefaultOn, per fitted platform
  • MicrophoneRemote only
  • FlagsLittle public documentation of per-model behaviour.

4.5/10

Weak
8

Blaupunkt

The name is licensed to third-party manufacturers and carries no shared engineering. What you get depends entirely on who assembled the particular set, which makes it impossible to score the brand as a whole.

  • PlatformLicensed badge; builder and platform vary
  • Recognition goes toWhichever platform is fitted
  • DefaultOn, per fitted platform
  • MicrophoneRemote; varies by model
  • FlagsCannot be assessed as a single brand; check the individual model.

4.5/10

Weak
9

Metz Blue

German brand, among the early Freely partners in the UK. No first-party advertising business identified, but almost no independent testing either.

  • PlatformGoogle TV; Freely
  • Recognition goes toNo first-party system; Google platform data
  • DefaultAd personalisation on
  • MicrophoneRemote; Google Assistant
  • FlagsLittle independent testing.

4.5/10

Weak
10

Nokia

The television name is licensed to StreamView rather than built by Nokia. Google TV underneath, no advertising arm attached to the badge, and limited UK retail presence.

  • PlatformGoogle TV
  • Recognition goes toNo first-party system; Google platform data
  • DefaultAd personalisation on
  • MicrophoneRemote; Google Assistant
  • FlagsLicensed badge; limited UK availability and no independent testing found.

4.0/10

Weak
11

Thomson

Another heritage name now applied under licence. Depending on the model you are buying a Google TV set or a Vestel-built one, with entirely different data behaviour behind the same logo.

  • PlatformGoogle TV or Vestel builds
  • Recognition goes toWhichever platform is fitted
  • DefaultOn, per fitted platform
  • MicrophoneRemote; varies by model
  • FlagsLicensed badge; verify the platform before buying.

4.0/10

Weak
12

Digihome

A Vestel white label sold through UK retail. Assume the same data pipeline as the other Vestel badges unless the specific model's documentation says otherwise.

  • PlatformVestel-built; TiVo OS on many models
  • Recognition goes toWhichever platform is fitted; TiVo Ads on TiVo models
  • DefaultOn, per fitted platform
  • MicrophoneRemote only
  • FlagsSame pipeline as the other Vestel badges.

4.0/10

Weak
13

Panasonic

The main range moved to Amazon's Fire TV platform, so it inherits Amazon's advertising stack. Entry models are Vestel-built, and Panasonic is named directly in TiVo Ads' UK viewing-data licensing dataset.

  • PlatformFire TV; Vestel and TiVo OS on entry models
  • Recognition goes toAmazon Ads; TiVo Ads on TiVo OS models
  • DefaultOn
  • MicrophoneRemote; Alexa
  • FlagsNamed in TiVo Ads' UK viewing-data licensing dataset, launched April 2026.

4.0/10

Weak
14

Philips / TP Vision

Moved its entire 2026 range off Google TV to Titan OS, a platform marketed to manufacturers as continuous revenue beyond the hardware sale, with an advertising partnership attached. The commercial intent is stated openly in Titan's own materials.

  • PlatformTitan OS across the 2026 range
  • Recognition goes toTitan OS, with a TiVo One advertising partnership
  • DefaultOn
  • MicrophoneRemote only
  • FlagsPlatform explicitly sold to manufacturers as post-sale revenue; heavy free ad-supported channel focus.

4.0/10

Weak
15

Sony

Google's collection plus a long-standing relationship with the recognition firm Samba TV. Named as a defendant in the Texas ACR litigation, which remains unresolved, with no reported change to its practices.

  • PlatformGoogle TV
  • Recognition goes toSamba TV relationship; Google platform data
  • DefaultOn
  • MicrophoneRemote; far-field on some models
  • FlagsTexas ACR case still live; no reported change to pre-lawsuit practice.

3.5/10

Poor
16

Xiaomi

Google's platform beneath an interface with a long history of in-house promotion and recommendation surfaces. Limited UK retail presence compared with the rest of this list.

  • PlatformGoogle TV
  • Recognition goes toGoogle platform data; Xiaomi account services
  • DefaultAd personalisation on
  • MicrophoneRemote; Google Assistant
  • FlagsLimited UK retail presence; promotional surfaces throughout the interface.

3.5/10

Poor
17

Hitachi

The Japanese company has not built these televisions for years. The badge is licensed to Vestel, and the data behaviour is Vestel's chosen platform, not Hitachi's.

  • PlatformVestel-built; platform varies
  • Recognition goes toWhichever platform is fitted; TiVo Ads on TiVo models
  • DefaultOn, per fitted platform
  • MicrophoneRemote only
  • FlagsBadge licensed; not designed or built by Hitachi.

3.5/10

Poor
18

Polaroid

Another licensed badge on Vestel hardware, usually sold through supermarkets. Same platform, same pipeline, different sticker.

  • PlatformVestel-built; platform varies
  • Recognition goes toWhichever platform is fitted
  • DefaultOn, per fitted platform
  • MicrophoneRemote only
  • FlagsBadge licensed; supermarket retail.

3.5/10

Poor
19

Logik

Currys' own brand. Cheap and competent, but the smart layer is licensed in, so check whether the model ships with TiVo OS, Roku or Fire TV before assuming anything about its behaviour.

  • PlatformVestel-built; TiVo OS, Roku or Fire TV
  • Recognition goes toTiVo Ads, Roku or Amazon Ads, depending on the model
  • DefaultOn, per fitted platform
  • MicrophoneRemote only
  • FlagsRetailer own-brand; behaviour set by whichever platform Currys specified.

3.5/10

Poor
20

Luxor

A Swedish name bought outright by Vestel in 2006 and used as one of its own brands. Everything that applies to the other Vestel badges applies here.

  • PlatformVestel-owned brand; platform varies
  • Recognition goes toWhichever platform is fitted
  • DefaultOn, per fitted platform
  • MicrophoneRemote only
  • FlagsVestel house brand rather than a licensed badge.

3.5/10

Poor
21

Telefunken

A German heritage name whose televisions have been designed entirely by Vestel. The engineering heritage the name implies is not in the box.

  • PlatformVestel-designed; platform varies
  • Recognition goes toWhichever platform is fitted
  • DefaultOn, per fitted platform
  • MicrophoneRemote only
  • FlagsHeritage badge; designed and built by Vestel.

3.5/10

Poor
22

JVC

JVC left the television business globally in 2011; the name was revived under licence by Vestel. Whichever platform the model carries brings that platform's data business with it.

  • PlatformVestel-built; Fire TV or TiVo OS
  • Recognition goes toAmazon Ads or TiVo Ads, depending on the model
  • DefaultOn
  • MicrophoneRemote; Alexa on Fire TV models
  • FlagsName revived under licence after JVC exited televisions in 2011.

3.5/10

Poor
23

Sharp

Vestel-built for the UK and named directly in TiVo Ads' UK viewing-data licensing dataset, which sells recognition data as a standalone product independent of any media buy.

  • PlatformTiVo OS or Google TV; Freely
  • Recognition goes toTiVo Ads, licensed on to third parties
  • DefaultOn
  • MicrophoneRemote only
  • FlagsNamed in TiVo Ads' UK viewing-data licensing dataset, launched April 2026.

3.5/10

Poor
24

Haier

Chinese manufacturer with a small UK television presence, running Google's platform. The jurisdiction questions raised against Hisense and TCL apply in principle, but there is no comparable body of testing or litigation to point at.

  • PlatformGoogle TV
  • Recognition goes toNot documented publicly; Google platform data
  • DefaultAd personalisation on
  • MicrophoneRemote; Google Assistant
  • FlagsNo independent UK privacy testing found; limited retail presence.

3.0/10

Poor
25

Finlux

Vestel's own brand, and the first to carry Roku's platform in the UK under their partnership. That brings Roku's recognition system, which reads every HDMI input, onto a budget television.

  • PlatformVestel; Roku OS on newer sets
  • Recognition goes toRoku on Roku models — aerial and every HDMI input
  • DefaultOn
  • MicrophoneRemote only
  • FlagsFirst Vestel brand to carry Roku in the UK.

3.0/10

Poor
26

Techwood

Named in TiVo Ads' UK viewing-data licensing dataset alongside the other Vestel brands. A low price does not mean a low data footprint.

  • PlatformVestel-built; TiVo OS
  • Recognition goes toTiVo Ads, licensed on to third parties
  • DefaultOn
  • MicrophoneRemote only
  • FlagsNamed in TiVo Ads' UK viewing-data licensing dataset, launched April 2026.

3.0/10

Poor
27

Bush

Argos' own brand, and the clearest illustration of the point. It is named in TiVo Ads' UK viewing-data licensing dataset, which means a two-hundred-pound catalogue television feeds the same kind of commercial pipeline as a flagship OLED.

  • PlatformVestel-built; TiVo OS; Freely
  • Recognition goes toTiVo Ads, licensed on to third parties
  • DefaultOn
  • MicrophoneRemote only
  • FlagsNamed in TiVo Ads' UK viewing-data licensing dataset, launched April 2026.

3.0/10

Poor
28

Toshiba

The television business is 95 per cent owned by Hisense Visual, which is not apparent from the box. Depending on the model you may be buying Hisense's platform, Amazon's or Xperi's.

  • PlatformVIDAA, Fire TV or TiVo OS; Freely
  • Recognition goes toNexxen on VIDAA, Amazon Ads or TiVo Ads
  • DefaultOn
  • MicrophoneRemote; far-field on some models
  • FlagsTelevision business 95 per cent owned by Hisense Visual, undisclosed at point of sale.

3.0/10

Poor
29

Roku TV

Recognition covers the aerial and every HDMI input, including other streaming sticks and self-hosted libraries. It is not lower only because Roku's documentation is unusually plain about what it does and the controls are comparatively easy to find.

  • PlatformRoku OS; Freely on UK sets
  • Recognition goes toRoku and its advertising partners — aerial and every HDMI input
  • DefaultOn
  • MicrophoneRemote only
  • FlagsClear public documentation and an accessible opt-out; platform was 87.5 per cent of 2025 revenue.

3.0/10

Poor
30

Amazon Fire TV

Advertising-funded by design, with a voice assistant on the remote and viewing data feeding a retail advertising profile. Also the platform underneath several Panasonic, JVC and Toshiba sets.

  • PlatformFire OS; Freely on Fire TV televisions
  • Recognition goes toAmazon Ads, joined to a wider Amazon profile
  • DefaultOn
  • MicrophoneRemote; optional far-field Alexa
  • FlagsPrinceton research found Fire TV channels carrying extensive third-party ad trackers.

3.0/10

Poor
31

LG

Runs recognition through Alphonso, in which LG holds a controlling stake, and markets advertising reach across 216 million televisions. Settled the Texas case in May 2026 without admitting liability, and is the subject of a disputed September 2026 research investigation plus reports of unpatched remote-code-execution flaws. Its opt-out has been independently verified to stop the traffic, which is the one thing keeping it off the bottom.

  • PlatformwebOS; no Freely
  • Recognition goes toAlphonso / LG Ad Solutions, majority-owned by LG
  • DefaultLG states off until the viewing agreement is accepted
  • MicrophoneFar-field and remote; a second microphone is alleged
  • FlagsTexas settlement May 2026 with no admission of liability. Disputed September 2026 research investigation. Reported remote-code-execution flaws not publicly fixed. Earlier Bitdefender root vulnerabilities across webOS v4 to v7. Opt-out independently verified to work.

2.5/10

Poor
32

Samsung

The largest first-party television advertising business, and the heavier transmitter of the two brands measured in the UK study. Settled Texas in early 2026 and faces a US class action. As with LG, the opt-out is verified to work — but the default is collection.

  • PlatformTizen; no Freely
  • Recognition goes toSamsung Ads, an in-house division
  • DefaultOn, prompted during setup
  • MicrophoneRemote; far-field on some models
  • FlagsTexas settlement early 2026, limited to Texas. US class action filed January 2026. One ACR endpoint geolocated to New York during UK testing. Opt-out independently verified to work.

2.5/10

Poor
33

Sky Glass

No published recognition system, but scored down for always-on far-field voice, a motion sensor that wakes the set as you walk past, an optional tracking camera, household advertising profiles matched at a data broker, and an aerial tuner that only works when the set is disconnected from the internet.

  • PlatformSky Entertainment OS
  • Recognition goes toNone published; AdSmart household profiling matched at a data broker
  • DefaultOn
  • MicrophoneAlways-on far-field wake word, plus remote
  • FlagsMotion sensing wakes the set as you pass. Optional 12-megapixel tracking camera. Freeview tuner only available with the internet disconnected. Classed as a content service, so Ofcom's mid-contract price-rise protections do not apply.

2.5/10

Poor
34

Skyworth

A large Chinese manufacturer with a thin UK retail presence and almost no published detail about what its sets collect. Scored low because the jurisdiction questions raised against Hisense and TCL apply equally, without the countervailing benefit of any independent scrutiny.

  • PlatformGoogle TV or its own platform, by market
  • Recognition goes toNot documented publicly
  • DefaultNot documented publicly
  • MicrophoneRemote; varies by model
  • FlagsNo independent UK privacy or security testing found. Same jurisdiction questions as the other Chinese manufacturers.

2.0/10

Avoid
35

TCL

Recognition supplied by Samba TV at chipset level across many brands. Subject to a live Texas lawsuit with no reported change in practice, an earlier US Homeland Security investigation into alleged backdoors, and published vulnerabilities permitting remote retrieval of system files including personal data and application tokens.

  • PlatformGoogle TV, Fire TV or Roku by model
  • Recognition goes toSamba TV, integrated at chipset level across 24 brands
  • DefaultOn
  • MicrophoneRemote; varies by platform
  • FlagsTexas ACR case still live with no reported change. US Homeland Security investigated alleged backdoors in 2020. Published vulnerabilities allowed remote retrieval of system files including personal data and security tokens.

1.5/10

Avoid
36

Hisense

Recognition data licensed exclusively to Nexxen through at least 2029. The first television manufacturer ever placed under a restraining order over this technology, and the subject of a US class action alleging viewing data reaches its state-owned parent. Its platform has no published independent audit.

  • PlatformVIDAA; also Fire TV; Freely
  • Recognition goes toNexxen, under an exclusive deal running to at least 2029
  • DefaultOn, prompted during setup
  • MicrophoneFar-field and remote on many models
  • FlagsFirst television manufacturer placed under a restraining order over ACR, December 2025. US class action filed May 2026 alleging viewing data reaches its state-owned parent. No published independent audit of the VIDAA platform.

1.5/10

Avoid

Two names you may still see on shelves are absent because they have been retired: Alba was dropped by Sainsbury's in 2022 in favour of Bush, and Tesco's Technika is no longer produced. Both were Vestel-built and behaved accordingly. Vizio does not sell in the UK, but it belongs in the story as the brand that proved the model: an FTC settlement in 2017 over viewing histories collected without consent, followed by a business in which all gross profit came from advertising and data while the hardware lost money.

Streaming boxes ranked

The box matters more than the television, because it is the layer you actually use. Same scale, same criteria — with two extra rows of detail that decide whether a box is usable in a British living room: whether it runs the major subscription services, and how it handles free UK television.

Freeview, Freeview Play and Freely are three different things

Worth settling before the table, because it is the question that trips people up. Freeview is broadcast, through an aerial, and needs no internet at all — over 70 live channels, though only around 12 to 15 of them in HD. Freeview Play is the same broadcast line-up on a certified television or recorder, with catch-up apps bolted on; it adds no extra live channels. Freely is the newer platform from the BBC, ITV, Channel 4 and Channel 5, delivered entirely over broadband with no aerial or dish required.

That last point is worth stating plainly, because it is easy to assume a Freely box is a simple replacement for an aerial. It is not. Freely is streamed, so a Freely box is permanently internet-connected by design and cannot be run offline — the whole platform is a network service. It is the opposite of a standalone device, which is why we have included Freely boxes in the ranking below rather than treating them separately.

On whether Freely gives you everything: almost. It passed 70 live channels during 2026 and carries 35-plus in HD, far more HD than Freeview manages. But some smaller channels people actually watch are still missing, and broadcasters have also launched streaming-only channels on Freely that Freeview does not carry at all. So it is not a strict subset in either direction — slightly fewer of the long-tail channels, rather more HD, plus a handful of exclusives.

1

Apple TV 4K

No content recognition at all, no advertising on the home screen or screensaver, and a setup process that offers plain prompts to disable voice, location and analytics rather than burying them. App Tracking Transparency means a refused app receives a zeroed advertising identifier and cannot substitute a hashed email, phone number or device fingerprint. Apple still holds search and viewing history against your account, anonymised, and voice transcripts may be retained for up to six months.

  • PlatformtvOS
  • RecognitionNone
  • Home-screen adsNone
  • Tracking controlsApp Tracking Transparency, plus setup-time prompts
  • Subscription servicesComplete. Netflix, Prime Video, Disney+, NOW, Paramount+ and the rest of the mainstream catalogue.
  • Free UK televisionNo Freely and no tuner. BBC iPlayer, ITVX, Channel 4 and My5 install individually, and each carries live channel streams as well as catch-up — so you do get live BBC, ITV, Channel 4 and Channel 5, but as four separate apps with no combined guide and without the smaller Freeview channels.

9.0/10

Good
2

Raspberry Pi 5 or mini PC running LibreELEC and Kodi

Nothing leaves the device that you did not install, and pairing it with a Jellyfin server keeps your own library entirely off third-party infrastructure. The cost is real and should not be glossed over: content protection limits commercial streaming apps, often to lower resolutions, high dynamic range is effectively unavailable on Linux, and you maintain it yourself.

  • PlatformLibreELEC and Kodi
  • RecognitionNone
  • Home-screen adsNone
  • Tracking controlsComplete; you install every component
  • Subscription servicesThe weak point. Nothing is officially supported; unofficial add-ons exist but content protection caps them at low resolution, and Prime Video and Disney+ are effectively unavailable.
  • Free UK televisionNo Freely and no official broadcaster apps. Add a USB DVB-T2 tuner, though, and Kodi's recording back end gives you the complete live Freeview line-up with a proper guide and recording — the fullest live British television on this list, but with no catch-up.

9.0/10

Good
3

Vero V (OSMC)

Considerably more plug-and-play than building your own, and it does handle high dynamic range properly. It will not run commercial streaming services at all, so this is for people watching their own media.

  • PlatformOSMC
  • RecognitionNone
  • Home-screen adsNone
  • Tracking controlsComplete
  • Subscription servicesNone. Netflix, Prime Video and Disney+ will not run on it, and there is no browser workaround.
  • Free UK televisionSame picture as the Pi route: no Freely and no broadcaster apps, but a USB DVB-T2 tuner gives you full live Freeview through Kodi's recording back end.

8.0/10

Good
4

Nvidia Shield TV Pro

Android-based, so Google's platform collection applies, but there is no manufacturer recognition layer bolted on top and the hardware has been supported for an unusually long time. It can also be reflashed with an alternative Android build if you want Google removed entirely.

  • PlatformAndroid TV
  • RecognitionNone from the manufacturer
  • Home-screen adsPromoted recommendation rows
  • Tracking controlsGoogle ad settings; can be reflashed
  • Subscription servicesComplete, with 4K certification. Netflix, Prime Video and Disney+ all supported.
  • Free UK televisionThe genuine weak spot, and the reason this box disappoints British buyers. No Freely and no tuner. BBC iPlayer exists only as a bespoke build Nvidia produced under licence from the BBC, and Channel 4's own published list of supported devices does not include the Shield. Check current availability before buying if UK catch-up matters to you.

6.0/10

Fair
5

Google TV Streamer

No manufacturer recognition system, but Google's own collection across the platform is extensive and ad personalisation is the default state.

  • PlatformGoogle TV
  • RecognitionNone from the manufacturer
  • Home-screen adsSponsored rows
  • Tracking controlsGoogle ad settings; personalisation on by default
  • Subscription servicesComplete. Netflix, Prime Video, Disney+ and the full Play Store catalogue.
  • Free UK televisionNo Freely and no tuner, but the broadcaster apps are now covered: BBC iPlayer finally arrived in March 2025, joining ITVX and Channel 4, each with live streams inside the app.

4.0/10

Weak
6

Roku streaming stick or box

The sticks and boxes do not carry the recognition system that Roku's own televisions do, which is a genuine distinction. They still gather viewing data for advertising profiles, and advertising is the company.

  • PlatformRoku OS
  • RecognitionNot present on sticks and boxes, unlike Roku televisions
  • Home-screen adsYes
  • Tracking controlsLimit ad tracking; privacy choices menu
  • Subscription servicesComplete. Netflix, Prime Video, Disney+ and a broad channel store.
  • Free UK televisionBBC iPlayer, ITVX, Channel 4 and My5 all present, live and on demand. Freely comes pre-installed on Roku televisions but is not available on the sticks and boxes.

4.0/10

Weak
7

Dedicated Freely box — Manhattan Aero, Netgem PLEIO, Humax Aura EZ

The only route to Freely on a television that does not have it built in, which matters most to Samsung and LG owners. These are fully networked streaming devices, not aerial adapters, and they must stay online to work at all. Privacy-wise they are unremarkable, and the Manhattan Aero in particular runs TiVo OS — the same platform behind the UK viewing-data licensing business described earlier in this article.

  • PlatformTiVo OS (Aero), Android TV (PLEIO), hybrid recorder (Aura EZ)
  • RecognitionTiVo Ads on the Aero; Google platform data on the PLEIO
  • Home-screen adsYes
  • Tracking controlsPer platform; the TiVo OS controls are the weakest here
  • Subscription servicesVaries sharply between them. The Netgem PLEIO runs the full Play Store, so Netflix, Prime Video and Disney+ are all available. The Manhattan Aero is a simpler TiVo OS box with a narrower app list, so check before buying.
  • Free UK televisionThe best free-TV experience on this list, and the only one with a single unified guide: over 70 live Freely channels, 35-plus in HD, catch-up from all four public broadcasters, and pause on live TV. Delivered over broadband, so the box is always connected — it cannot be used offline. The Humax Aura EZ also takes an aerial and records, but that means it needs a working aerial socket.

3.5/10

Poor
8

Amazon Fire TV Stick

Advertising-funded, voice-enabled, and the viewing data joins a wider Amazon profile. Convenient and cheap, which is the trade being offered.

  • PlatformFire OS
  • RecognitionNot documented for sticks; viewing data still collected
  • Home-screen adsYes
  • Tracking controlsInterest-based ads off; app and over-the-air usage data off
  • Subscription servicesComplete. Netflix, Prime Video, Disney+ and everything else mainstream.
  • Free UK televisionBBC iPlayer, ITVX, Channel 4 and My5 all available with live streams. Freely is explicitly excluded — the Amazon agreement covers Fire TV televisions only, and the Freely app states plainly that it does not serve Fire sticks.

3.0/10

Poor
9

The television's own built-in platform

Whatever the badge, this is the layer that runs recognition, serves home-screen advertising and enumerates your network. Leaving it unused is the single largest privacy improvement available to anyone who already owns a smart television.

  • PlatformVaries by manufacturer
  • RecognitionPresent on most, covering aerial and HDMI
  • Home-screen adsYes on most platforms
  • Tracking controlsBuried, and the menu paths move between firmware versions
  • Subscription servicesUsually complete on the major platforms, though older sets steadily lose apps as manufacturers withdraw support — Channel 4, for instance, dropped several older devices during 2026.
  • Free UK televisionThe only place Freely comes built in: Hisense, Bush, JVC, Sharp, Toshiba, Panasonic, Metz, Philips, and Fire TV and Roku televisions. Samsung and LG do not include it. Nearly every set also has an aerial tuner, which remains the only route to the complete Freeview line-up and the only one that works with no internet connection at all.

2.5/10

Poor

The other kind of box: "fully loaded" sticks

No article about television privacy in Britain is complete without this, because roughly four million UK households are estimated to be streaming paid content without paying for it, usually through a modified streaming stick or a subscription to an unlicensed IPTV service. The devices are generally ordinary hardware — the Amazon name has become a catch-all term rather than an accurate one — that has been modified to run software from outside the official app store.

The legal position is the part most people have heard about, and it has hardened considerably. What has changed more quietly is the security position, and it is worse than the legal one.

18%of illegal streamers reported a malware infection in the past year
41%have had bank details compromised while streaming illegally
£1,680average loss among those affected
10mdevices compromised by the BadBox 2.0 botnet, per Google

Those first three figures come from research for BeStreamWise, a cross-industry initiative whose backers include Crimestoppers, the Premier League, the BBC, ITV and Sky, so read them with that context — but the direction of travel is corroborated by independent work. A study of the illicit streaming economy published in 2026 found that nearly half of the pirate streaming applications tested contained malware capable of harvesting personal data, compromising devices and recruiting them into botnets. Academic analysis of illicit IPTV sites has found malicious URLs and files across the majority of the sample, including one exhibiting ransomware behaviour.

  • Your broadband becomes somebody else's relay. This is the risk almost nobody considers. The BadBox and BadBox 2.0 botnets compromised low-cost Android devices — television boxes, sticks, projectors — and sold access to their IP addresses as residential proxy services. Security researchers documented that access being used downstream for account takeover, fake account creation, credential stuffing, malware distribution, one-time-password theft and denial-of-service attacks. The traffic leaves from your line, under your IP address, and that is what appears in anyone else's logs. Google sued 25 entities over the scheme in 2025, by which point it had compromised more than ten million devices. Researchers observed the associated traffic coming from 222 countries, and expect further versions.
  • It is a criminal matter, and enforcement now reaches users. FACT states that using these devices breaches the Fraud Act and can lead to prosecution, fines or custodial sentences. In one case a Liverpool man received three years and four months for supplying loaded sticks, with a concurrent two years and three months for accessing and viewing the content himself. In June 2026 a supplier serving almost 2,000 customers was sentenced to three years and two months. Crucially, in December 2025 FACT said it had contacted more than 1,000 people suspected of using illegal streaming services, warning them to stop — and the usual route to identifying users is the seizure of a provider's customer records.
  • The malware is frequently pre-installed. Many of the compromised devices in the BadBox research arrived backdoored from the factory, on uncertified hardware that never passed Google's Play Protect testing. Where the backdoor sits in the firmware, a factory reset does not remove it. You cannot clean these devices; you replace them.
  • It is an unpatched computer inside your firewall. Running unofficial software generally means disabling the device's own protections, and these boxes receive no security updates. Everything in the section above about televisions as a route into the network applies here with far greater force, because this device was deliberately opened up and its supplier has no reason to care about you.
  • It follows people to work. In the BeStreamWise research, 68 per cent of those accessing content illegally had done so on a work-issued phone and 58 per cent on a work laptop. For any business with a bring-your-own-device policy or staff working from home, that is a route from a household's entertainment habit into a corporate network.

Sky Glass deserves its own section

Sky Glass is a UK-specific product and a different shape of problem, so a straight comparison undersells it. We found no published recognition system — but the data arrives by other routes.

  • Household profiling through a broker. Sky's AdSmart builds a household profile from what you have told Sky, how you use its products, and information acquired from other organisations. Where an advertiser wants to reach specific households, Sky shares your contact details with a data broker such as Experian, which matches them against the advertiser's own data. Ads are served to groups of 5,000 households or more, and the same system runs on Virgin Media.
  • An always-on far-field microphone. Sky Glass listens for a wake word, unlike the Sky Stream puck, which requires a button press. Reviewers have reported false triggers.
  • Presence sensing. The set can be configured to wake when you walk past it. No other mainstream UK television ships motion detection as standard.
  • An optional tracking camera. Sky Live is a 12-megapixel camera with a 110-degree field of view, a wide aperture for low light, and automatic subject and body tracking.
  • The aerial tuner is gated. The built-in Freeview tuner only becomes available when the television is disconnected from the internet. You cannot have broadcast television and the apps at the same time, and cancelling the subscription costs you the guide and the live channels.
  • No protection against mid-contract price rises. Because Sky Glass and Sky Stream work over the internet, they are treated as content services rather than communications services, so Ofcom's rules requiring price rises to be set out upfront — and allowing penalty-free exit — do not apply to them.

Buying on credit also means two separate agreements: a fixed-sum loan for the television, typically over 48 months, and a distinct contract for the service.

What we actually recommend

Best overall

Buy the best panel your budget allows, skip the network setup entirely on first boot, and put an Apple TV 4K on HDMI 1. Use the aerial tuner for live television. Recognition needs the set online; an offline television cannot fingerprint, advertise or enumerate your network.

Best value

If you are going offline anyway, a Hisense or TCL Mini-LED becomes a sensible buy despite sitting at the bottom of our table. The objection to those brands is almost entirely about software and jurisdiction. Never connect it and you are buying an excellent panel for considerably less.

If it must be connected

Choose Samsung or LG and actually complete the opt-out. They are the only two brands whose controls have been independently shown to stop the traffic, and both now operate under binding consent orders that are likely to shape their engineering globally.

Offices and installations

Use a commercial signage display or a large 4K monitor. No consumer smart platform, no home screen, no account, and built for long duty cycles. Add a soundbar and drive it from whatever source you already trust.

Locking down a television you already own

  1. Keep the TV off the network

    If you can, skip wireless TV setup entirely and drive everything from an external box plus the aerial tuner (aerial TV is often not an option these days and will soon be discontinued). If the set is already connected, remove the credentials or block its hardware address at the router. Don't plug in a network cable either and if the Wi-Fi won't disable, consider changing the password.

  2. Turn off content recognition

    On LG this is Live Plus, under General, System, Additional Settings, plus the viewing information and interest-based advertising agreements under Privacy & Terms. On Samsung it is Viewing Information Services under Terms & Privacy. On Roku it is Smart TV Experience under Privacy. However this permission change is sometimes ignored, so it can never really be trusted.

  3. Disable the microphone

    Switch off voice recognition in settings and use the physical microphone switch if the model has one. Remove the batteries from a voice remote you never use. Some have hidden mics, so keeping it offline is safer.

  4. Move the streaming smarts to a box (the no.1 solution)

    Put an Apple TV (its a streaming box not an actual TV) or another device from the ranking above on HDMI 1 and stop using the television's own apps. The built-in platform is the layer doing the collecting. So make sure the TV remains offline and the Apple TV is the device that stays online.

  5. Separate it from everything else (only for IT gurus)

    If the set must be online, put it on a guest network or a dedicated VLAN alongside the other smart-home hardware, so a compromised television cannot see your laptops, servers or backups. Do not forward ports to it, and turn off UPnP unless something genuinely needs it. Keep the firmware current.

  6. Filter at the router as a last resort but don't rely on this

    Run a DNS filter such as Pi-hole, NextDNS or AdGuard Home with the smart-television blocklists enabled. This catches the endpoints that ignore the on-screen toggles, and it protects every device in the house rather than one but sometimes the TV's don't do domain lookups and use IP addresses which bypass this protection.

Re-check the settings after major firmware updates. The menus move between platform versions, which is why any single set of instructions has a short shelf life — and why treating a television as a networked computer, rather than an appliance, is the correct mental model. If you want that thinking applied across the rest of your network, our cyber security and network installation services start from the same principle.

Want your network checked properly?

We audit what your devices are actually sending, segment the ones that shouldn't see everything, and lock down the rest.

Get in touch