Ledger's SDK transmits signing metadata to its servers by default, according to recent reports. The data sent can include destination addresses and device details, raising privacy concerns for users of wallets that integrate the Ledger hardware signing library. The extent of exposure depends on how individual wallet applications implement the SDK. Ambire Wallet stated that no affected version of the Ledger SDK reached its production app, limiting potential impact on its user base.