Photo Metadata & GPS Privacy

What is EXIF data?

EXIF (Exchangeable Image File Format) is a standard for storing metadata alongside the actual pixel data in a photo. Most cameras and phones write it automatically every time you take a picture: the camera and lens model, the exact date and time, exposure settings, the software last used to edit the file, and — if location services were enabled — GPS coordinates precise enough to identify a specific building.

Why it’s a real privacy concern

None of this is visible when you look at the photo itself, which is exactly the problem: people routinely share images without realizing a precise location and timestamp travel along with them. Higher-education security researchers have documented this as a genuine privacy risk for exactly that reason — the data is invisible but complete enough, combined across several photos, to reconstruct where someone lives, works, or was at a specific time (EDUCAUSE Review, “Privacy Implications of EXIF Data,” 2021). The risk is highest for anyone with a reason to keep their location private — journalists, activists, domestic-violence survivors, or anyone posting photos of their own home.

Does everything strip this automatically?

Some platforms do, some don’t, and it changes over time as platforms update their own upload pipelines — so treat any specific claim about a specific app as something to verify yourself rather than take on faith, including from this page. The safer general rule: a photo emailed as an attachment, shared as a raw file via cloud storage, or sent through a messaging app’s “send as document/original quality” option is far more likely to still carry its full original metadata than one posted directly through a social network’s normal photo-upload flow. When it matters, check for yourself with the metadata viewer rather than assuming.

What to actually do about it

• Turn off location tagging in your camera app’s settings if you don’t need geotagged photos — this stops the data from being recorded in the first place, which is more reliable than remembering to clean every photo afterward.
• Before sharing a photo anywhere you’re not sure will strip it — a personal website, a forum, an email attachment, a direct file share — check what’s inside with the metadata viewer.
• If it contains anything you don’t want shared, run it through the metadata remover first.
• For photos you’ve already posted publicly in the past, be aware that removing metadata now doesn’t retroactively change copies already downloaded or archived by someone else.