privacydeep-dive

Plex Phones Home: What the Media Server Sends to Its Servers

Plex is popular among privacy-conscious users who want to self-host their media. But Plex sends viewing data, usage statistics, and metadata to its own servers even for locally stored files.

Plex has a reputation among self-hosters as the sophisticated alternative to handing your media library over to Netflix or Spotify. You run your own server, you store your own files, you’re in control. It’s a convincing pitch — and for many use cases, it works exactly as described.

But there’s a gap between what most people believe about Plex and what Plex’s privacy policy actually says. Plex collects data from your server. It tracks what you watch. It maintains a relationship with your account that routes through Plex’s cloud infrastructure regardless of whether your media files are physically on your own hardware.

Understanding what Plex sends home is important if privacy is part of why you chose self-hosting in the first place.

How Plex Actually Works

A common misconception about Plex is that once you set up a Plex Media Server on your own hardware, your viewing is entirely local. The server holds your files. The app on your TV plays them. Simple.

The reality is more layered. Most Plex clients — including the app on your Roku, Apple TV, Android, or smart TV — establish connections that route through Plex’s relay servers by default. This happens because Plex’s relay infrastructure solves a common networking problem: most home routers don’t have direct incoming connections configured for local servers, so Plex routes connections through its cloud as a convenience.

You can configure Plex to use “direct connections” only, which bypasses the relay. But the default setup routes your media stream through Plex’s infrastructure, meaning Plex’s servers see the connection metadata even if not the file content.

More significantly, Plex’s app and server software both collect telemetry and usage data regardless of connection type.

What Data Does Plex Collect?

Plex’s privacy policy, as published on their website, identifies several categories of data collected from both the server software and the client apps:

Account and Registration Data: Your email address, account preferences, and Plex account information are stored on Plex’s servers. You cannot run Plex without a Plex account.

Playback and Usage Data: Plex collects information about what you watch, including titles, duration, playback position, and timestamps. This data is used to power features like “Continue Watching” and watch history sync across devices — which requires it to exist on Plex’s servers.

Device and Technical Data: Information about the devices accessing your Plex server, including device type, operating system, app version, and connection quality, is collected for diagnostics and feature development.

Library Metadata and Thumbnails: When you add media to your Plex library, Plex downloads metadata — posters, episode summaries, cast information, ratings — from Plex’s own metadata servers. Information about what’s in your library is shared with Plex’s services in this process.

Crash Reports and Diagnostics: By default, Plex collects crash reports and performance data from both the server and client applications.

Plex Discover and Network Features: If you use Plex’s social/discovery features — Plex Discover, Watchlist, or seeing what friends are watching — that data lives on Plex’s infrastructure.

The “Plex Pass” Dimension

Plex’s business model relies on Plex Pass subscriptions for premium features. The business model matters for privacy because it shapes what Plex does with user data.

Unlike some platforms that monetize user data through advertising, Plex’s primary revenue is subscription-based. Plex’s privacy policy states they don’t sell personal information. These are real commitments that make Plex meaningfully better than ad-supported platforms in terms of data monetization.

However, the data collected still exists on Plex’s servers. It’s subject to Plex’s terms, any future policy changes, acquisition scenarios, or legal requests. The fact that Plex doesn’t sell your data today doesn’t mean the data doesn’t exist in Plex’s cloud.

Why This Matters If You Chose Plex for Privacy

The specific privacy concern with Plex isn’t that it’s doing something malicious with your viewing data. It’s that people who self-host Plex often do so under the assumption that “my server, my data” means their media activity isn’t on any company’s servers.

That assumption isn’t accurate. Your media files are on your server. Your viewing history is on Plex’s servers.

If the privacy goal is keeping a record of what you watch away from corporate systems, Plex in its default configuration doesn’t achieve that. Your watch history is synced to Plex’s cloud so it can be accessed across devices — which is the feature, and also the privacy implication.

The same applies to library contents. When Plex scans your server and downloads metadata, it learns what’s in your library. If you have a collection of personal home videos alongside commercial content, Plex’s metadata requests reveal the presence of that content to Plex’s servers.

What Settings Actually Help

Plex does offer controls that reduce data sharing, though not eliminate it:

Disable “Send crash reports and diagnostics”: Found in the Plex server settings under “Troubleshooting.” This stops automatic crash data collection.

Disable “Advertise as player to the network”: Reduces how much the Plex client announces itself on your local network and to Plex’s discovery services.

Disable “Enable direct connections” and force local-only playback: In the server settings under “Remote Access,” you can disable remote access entirely. This means you can only access your Plex server from inside your home network, but it stops all remote connections including Plex’s relay.

Don’t use Plex Discover or Watch Together: These social features send data about your viewing preferences and library to Plex’s social infrastructure. Avoiding them limits that exposure.

Review and disable account data sharing in Privacy settings: Plex’s account settings include some opt-outs for how your data is used for recommendations and product improvements.

However, some data collection is unavoidable if you use Plex at all. Your account exists on Plex’s servers. Basic authentication and sync require server-side storage. Metadata requests reveal what’s in your library.

The Difference Between Self-Hosting and Privacy

Self-hosting and privacy are often discussed together as though they’re the same thing. They’re related but distinct.

Self-hosting means running software on your own hardware. This gives you control over uptime, costs, file organization, and what happens to your files if the provider shuts down. These are real advantages.

Privacy, in the relevant sense, means keeping your activities and content away from third parties who might use that information for purposes you haven’t consented to. Self-hosting contributes to this goal, but only if the software running on your hardware doesn’t send telemetry, activity logs, and usage data back to a vendor’s servers.

Plex is a self-hosted application in the first sense but not fully in the second. The software runs on your hardware; the activity data lives in Plex’s cloud.

This is worth naming clearly because the Plex pitch — “your media, your server” — sounds like a privacy guarantee. It’s a storage location guarantee. Those aren’t the same thing.

Alternatives for Stricter Local Privacy

If the goal is genuinely local media serving with minimal or no cloud-side data collection, there are alternatives to Plex that trade some convenience for less data sharing:

Jellyfin: A fully open-source, community-run media server with no mandatory account creation and no telemetry sent to a vendor. Jellyfin’s architecture doesn’t require connecting to any external service. The trade-off is a less polished interface and no commercial support.

Emby: A Plex alternative that also requires an account for some features but has more granular data controls than Plex’s default setup.

Simple HTTP/DLNA Serving: For the most technically inclined, a simple media server on your local network (using something like miniDLNA or a static file server) shares nothing with any vendor. You give up all of Plex’s convenience features — library organization, metadata, multi-device sync — in exchange for genuine local-only serving.

For most people, Jellyfin hits the better privacy balance. It’s free, actively maintained, and doesn’t require any account creation or external server connections for basic functionality.

The Pattern Worth Recognizing

Plex is a useful case study for a broader pattern: apps that give you control over where your files live don’t necessarily give you control over where your behavior data lives.

Your files → your server. Your watching habits → their cloud. Your library contents → their metadata database. These are distinct. Control over one doesn’t imply control over the others.

This pattern appears across many self-hosted or “privacy-first” applications. The key question to ask for any tool you use is not just “where are my files?” but “where is the record of what I do with those files?”

For personal memories, journals, or private archives, the answer to that second question matters as much as the first. A storage service that keeps your files encrypted on its servers but doesn’t track how you access them may offer better practical privacy than a “self-hosted” solution that routes your usage through a vendor’s cloud.

What to Do If You Use Plex

If you’re a current Plex user and privacy is a concern, the practical steps are:

  1. Review Plex’s privacy settings and disable diagnostics, crash reporting, and any social features you don’t use
  2. Disable remote access if you only need local playback — this limits what Plex’s relay infrastructure sees
  3. Audit what’s in your Plex library and consider whether any content (personal home videos, scanned documents, private recordings) should be served through a system with no vendor account requirements
  4. For genuinely private content, consider whether a different serving approach is more appropriate than Plex

Plex is a well-built product that does what it advertises. The privacy considerations here aren’t a reason to avoid it if the convenience trade-offs work for you. They’re a reason to understand what the trade-offs actually are, rather than assuming “my server” means “no vendor involvement.”

Self-hosting your media doesn’t mean your media habits are off the grid. With Plex, they’re in Plex’s cloud. That’s the part worth knowing.

Your memories deserve better than an ad platform.

Try daftei free →
← All posts