According to Protos, developers have discovered that Ledger's default signing SDK sends transaction details, related addresses, and device information to its servers, sparking privacy controversies. Ledger Donjon responded that clear signing requires querying transaction descriptions on the server, thus necessitating the transmission of details required to match the descriptions, adding that this data is not retained and that wallets can switch to using their own modules instead. The report discusses SDK metadata transmission, which does not imply that private keys have been uploaded.