Ledger collect information about users transactions

[oll]

The developer of Ambire Wallet noticed that after the Ledger SDK update, third-party wallets that use Ledger libraries can send details about the transactions being signed to the company's servers https://blind-signing.api.ledger.com/: blockchain, address, firmware, Ledger model.

The feature was added in April 2026, and third-party developers need to disable it manually.

In Ambire wallet, the problem was noticed before the update was released, so the wallet's users were not affected. How many other wallets transmit data to Ledger remains a mystery.

[promise444c5]

Problem? Or Feature..  

[Zaguru12]

I don’t know how true this is since the founder of this is actually looking to advertise his own wallet (ambire wallet).

But seriously I am not surprise that they are extracting this and sharing with third parties because isn’t this same with their seed phrase recovery method where they try to extract and send out splitted keys to third parties. If they are capable of this then they can actually be also guilty of this too and they wouldn’t see any harm in it since they sees sharing users data that should be offline with third parties as a way of safeguarding users coins.

Another day and another warning to those ledger users

[Meuserna]

Is this different than what Ledger has been doing for years?

"Ledger Live is phoning out data on assets you hold in your hardware wallet the moment you access Ledger Live. It’s also sending out tons of other information about your computer and device."

The app apparently transmits data to an external endpoint at “https://api.segment.io/v1/t”, identified as an outsourced data collection service.

That's from BitcoinNews.com, though the link has been removed or changed:
https://bitcoinnews.com/ledger-live-app-accused-of-collecting-user-data/

Ledger is poison, for so many reasons.

It's closed source. It's been hacked, but they pay bounties to hackers so they can lie and say they haven't been hacked. They've leaked their customer database. Their devices have been tampered with, leading to thefts. They had to scrub their website to remove blatant lies, such as: "The secret keys or seed are never exposed to the BLE stack and never, ever leave the Secure Element." That was a lie, because there's literally an over the internet key extraction API built into the firmware! And that API is a time bomb that will get hacked, and many Ledger users will get robbed. I could go on and on.

But Ledger devices look cool, so the gadget guys keep buying 'em.

[dkbit98]

Surprise, surprise (not) 
I said long time ago that ledger was spying it's users, and it looks like I was correct about it.
I think we need more people like Mark Karpeles to flash ledger devices and import fresh open source firmware in those devices.
Even then I would not use crap ledger devices, but this would at least reduce electronic waste created by this company.

[PX-Z]

"To protect your privacy"

That's big words coming from them. They really are clowns, they still have this kind of features when on thw first they can't protect the personal data of their users feom their ecom site. What are they really thinking?