What your photos reveal: EXIF, GPS location, and how to strip it before sharing

A photo file is two things: the picture, and a block of structured data about the picture that the camera wrote at the moment of capture. That block is called EXIF, and on a phone it is fuller than most people expect. Post a picture of a sofa you are selling, and the file may say which street the sofa is on. Send a photo of your child to a group, and it may say which park, on which day, at which minute. None of that is visible when you look at the image, which is exactly the problem.

What is in there

• GPS coordinates, usually to within a few metres, plus altitude and sometimes the direction the camera was pointing. Written whenever the camera app has location permission, which on most phones it does by default.
• Date and time of capture, to the second, with the time zone on newer phones.
• Device: make, model, and often the lens and the operating system version. Enough to tell a stranger which phone you own.
• Camera settings: exposure, aperture, ISO, flash. Harmless, but part of the fingerprint.
• Software used to edit the file, and in some cases the original file name.
• An embedded thumbnail. Some editors update the picture but not the thumbnail inside the metadata, so a photo you cropped to remove something can still carry a small copy of the uncropped frame.

Screenshots are the exception: they record the time and the device and little else, and never a GPS position. Photos taken with the camera are the ones to worry about.

Who strips it and who does not

The large social networks process every uploaded image and serve a re-encoded copy to viewers, which drops the metadata; Facebook, Instagram and X have done this for years. That protects you from other users, not from the platform itself, which reads the data before discarding it. Outside those feeds the picture is mixed, and this is where people get caught:

How the photo is shared	Metadata reaches the recipient?
Posted to Facebook, Instagram, X	No (stripped on upload)
WhatsApp, Signal, Telegram, sent as a photo	Generally no, because the app re-compresses it
Any messenger, sent as a file or document	Yes, the original file is delivered intact
Email attachment	Yes
Marketplace and classified listings	Varies by site; many keep it
Cloud drive link, AirDrop, USB	Yes
Your own website or blog	Yes, unless your software strips it

Behaviour changes with app updates, so the only safe assumption for anything outside a major social feed is that the data travels with the file.

Check a photo before you trust it

The EXIF viewer on this site shows what a file contains: drop a photo and you see the location, if there is one, with the date, device and the rest of the fields. The reading happens in your browser, which matters here more than anywhere, because uploading a photo to a website in order to find out whether it reveals your location would be an odd way to protect it. If you want to check on the phone itself, iPhones show the location and camera details when you swipe up on a photo or tap the info button, and Google Photos on Android shows them under the three-dot menu.

Strip it: the clean copy

The same tool produces a copy with none of the metadata. The picture is re-created pixel for pixel on your device and saved without the EXIF block, so the image looks identical and the hidden record is gone. One detail that trips people up: many phone photos are stored sideways and rely on an orientation note in the metadata to display upright. The clean copy is saved already rotated the right way, so removing the note does not flip your picture.

Compressing an image with the image compressor has the same side effect, because re-encoding drops the metadata too; if you are shrinking a photo for a listing anyway, you are also cleaning it.

Stop the phone writing it in the first place

You can turn off location for the camera app: on iPhone under Settings, Privacy, Location Services, Camera, choose Never; on Android in the camera app's own settings, look for "Save location" or "Location tags". The cost is that your own photo library loses its map and place names, which many people value. A middle path exists on iPhone: when sharing, tap Options at the top of the share sheet and switch off Location, which removes it from the shared copy only. Google Photos has a similar setting under sharing options to remove geolocation from shared items.

Metadata is not the only leak

Stripping EXIF makes the file silent; it does not make the picture silent. A street sign, a house number, a reflection in a window, a parcel label on the table and a car registration in the background all say where you are, and no metadata tool touches them. For those, the blur and redact tool pixelates the region you drag over, on your device. And a photo of a document, where the content itself is the sensitive part, is better handled by the document scanner, which produces a flat PDF of the page and nothing else.

A sensible routine

1. Before posting a camera photo anywhere other than a major social feed, run it through the EXIF viewer once, to see what your phone writes.
2. Share the clean copy, not the original, for listings, forums, email and anything sent as a file.
3. Look at the picture itself for addresses, plates and screens, and blur them.
4. Keep your originals, with their metadata, in your own library. The data is useful to you; it is only a problem in other people's hands.