Smart TV SoCs usually have a capture engine that taps into the video stream being sent to the screen after HDCP decryption and allows it to be DMA'd directly to main RAM [1], and from there analyzed and sent to the manufacturer's ad partner of choice. As long as the firmware does not allow the end user to access these decrypted frames in any way, the TV will still pass HDCP certification with no issues.
