← IoT Privacy Database

Roku Streaming Platform

Roku, Inc. · Smart TV

✓ Reviewed

7.5Surveillance
Index
Policy — what its policy permitsF
Evidence — what research provesF

States outright that it has collected, sold and shared viewing history, browsing/search history and voice data for cross-context behavioral advertising over the past 12 months, per its own privacy policy.

Why this rating

Roku's own privacy policy states outright that it has sold and shared viewing history, browsing/search history and voice data for cross-context behavioral advertising, and the platform suffered a 2024 credential-stuffing breach affecting roughly 576,000 accounts.

What it is

Manufacturer
Roku, Inc.
Category
Smart TV
Model years
2008-present
Market status
Current
Companion app
Roku

The evidence 2

Independent research, regulatory action, lawsuits, breaches and journalism about this device — the "what actually happens" axis. Each links to its source.

  1. Breach report · Roku · 2024-04-01

    Roku disclosed a credential-stuffing attack compromising roughly 576,000 accounts in 2024, prompting mandatory password resets and two-factor authentication.

    Why it matters here: Roku's own breach disclosure covers ~576,000 compromised accounts in 2024.

  2. Ngo review · Consumer Reports · 2023-01-01

    Consumer Reports guide documenting which major smart TV brands track viewing via ACR and how to disable it.

    Why it matters here: Consumer Reports guide covers Roku's ACR opt-out settings.

Where your data goes

Third parties this device's data has flowed to, and on what basis. An ended tag means the flow has verifiably stopped — it stays listed for the record.

Descriptive, cited, not legal advice; ratings are versioned and corrections create a new version. Data from the IoT Info Grabber DB research project, CC BY-SA 4.0.

← Back to the IoT Privacy Database