Research by Include Security documents that Bright Data’s SDK, embedded in legitimate consumer applications distributed through standard app marketplaces, silently enrolls Samsung Tizen smart TVs, LG webOS smart TVs, Roku devices, and iOS phones as residential proxy exit nodes routing third-party web scraping traffic without meaningful user consent. The SDK’s peer relay channel operates without authentication, its traffic bypasses VPN controls on iOS, and documented bandwidth disclosures shown to users do not match SDK configuration files. Enterprise security teams face exposure through BYOD iOS fleets and smart TV deployments that are typically outside EDR and asset inventory scope.