Samsung vs Netflix

Samsung's data appetite is unusually broad for a hardware maker: voice recordings stored on servers with potential third-party retention, keyboard input logging via Predictive Text synced across devices, and persistent hardware identifiers that survive ad-ID resets. The company explicitly acknowledges that sharing with business partners may constitute a data sale under US law (CCPA). Full GDPR-grade rights are reserved for EEA/UK/Swiss residents; everyone else gets basic access and deletion with no response-time commitments. Retention timelines are vague and there are no named security certifications or breach notification windows.

Netflix collects detailed viewing behaviour, device fingerprints, and advertising data — including interests inferred by third-party ad companies from your activity across the internet — to serve behavioural ads on its ad-supported tier. Controls are reasonably accessible, but retention timelines are vague, Do Not Track is ignored, and the breadth of the ad-tech ecosystem is larger than you might expect from a subscription service.