Ledger's Developer Kit Reports Every Signature to Ledger Unless Wallets Opt Out, Ambire Developer Says - Unchained

Ledger SDK found to transmit users' transaction data and device info by default

Privacy researchers discovered that the default Ledger SDK used by wallet apps to connect to Ledger hardware devices transmits transaction details and device information to Ledger servers unless apps explicitly opt out. Ledger's security team said the lookups power Clear Signing and occur in software rather than on the device.