Hardware wallet provider Ledger is under scrutiny following revelations about its data collection practices during transaction signing. According to a report by security researcher @gregthegreek, Ledger's devices execute an API call to their servers containing metadata after every signing interaction. The investigation highlighted that while Ledger introduced a "v2" protocol that strips certain metadata fields, the remaining data still allows for the correlation of blockchain addresses with specific users. The timing of this post-signing data transmission has been criticized as unnecessary and a significant privacy vulnerability for hardware wallet users who rely on these devices for secure, offline key management.