What happened
LG Electronics USA announced it will remove or suspend any webOS smart TV applications found to be enrolling users' televisions as residential proxy nodes — effectively allowing unknown third parties to tunnel internet traffic through people's home networks without meaningful disclosure. The decision follows researcher findings that over 42 percent of apps on LG's app store carried this behavior. Separately, Apple quietly deployed a fix on July 3, 2026, for a vulnerability in its Hide My Email feature that had been leaking users' real email addresses into Mail logs. The flaw, disclosed more than a year earlier by Tyler Murphy of EasyOptOuts, undermined the core privacy promise of the alias service, which is designed to shield actual addresses from apps and websites.
Why it matters for your business
Smart TVs are increasingly present in corporate offices, conference rooms, and hospitality environments, and most IT asset inventories do not account for the proxy risk they may introduce. A device silently routing external traffic through a corporate network can complicate threat detection, expose internal IP ranges, and create compliance exposure under frameworks like SOC 2 or GDPR. On the email side, organizations relying on Apple's Hide My Email for employee privacy or low-friction sign-up flows should audit whether any sensitive addresses may have been exposed during the vulnerability's window. The practical takeaway: connected consumer devices deserve the same vetting as traditional endpoints, and privacy features from any vendor warrant independent verification before being treated as a security control.
What to watch next
LG has not yet published a full timeline for enforcement or a list of affected apps, so IT and procurement teams should monitor the company's developer communications for specifics. On the Apple side, it remains unclear how widely the Mail log data was accessible or whether any third parties harvested exposed addresses during the disclosure window. Broader regulatory scrutiny of residential proxy bundling in consumer app stores — across platforms including Android TV and Roku — is a logical next step that industry watchers should track.
