What your photos reveal about you (and how to stop it)

There is a second file inside every photo you take. It does not show up when you open the image, but it travels with it everywhere: to the person you emailed it to, to the marketplace listing, to the forum post.

It is called EXIF data, and on a modern phone it usually includes the exact latitude and longitude of where you were standing.

What is actually in there

Open any photo straight off a phone or camera in a metadata viewer and you will typically find:

• Camera make and model, and often the lens
• Exposure settings — ISO, aperture, shutter speed, focal length, whether the flash fired
• The date and time, to the second, including time zone
• GPS coordinates, frequently accurate to a few metres, sometimes with altitude
• The software used to edit it, and when
• A serial number, on some cameras, uniquely identifying the body that took it

For photographers this is genuinely useful: it is how you learn which settings produced the shot you liked. For everyone else it is a disclosure you never agreed to make.

Why it matters more than it sounds

The specific risk is not "someone knows what camera you own". It is the pattern.

A handful of photos posted over time, each carrying coordinates, maps out where you live, where you work, which school your children attend, and what time you are usually at each. None of that is inferred or guessed — it is written into the files, precise and machine-readable, ready to be extracted in bulk.

The concrete cases are mundane and well documented: sale listings that reveal a seller's home address, "anonymous" posts tied to a location, photos of a supposedly private venue that pin it exactly on a map.

The date matters too. A photo posted from holiday, carrying a timestamp, is a statement about when your home is empty.

Do platforms strip it?

Sometimes. Large social networks generally re-encode uploads, which removes EXIF as a side effect. That covers the obvious cases.

What it does not cover:

• Photos emailed to someone, or sent through a chat app as a file rather than an image
• Photos uploaded to forums, marketplaces, portfolios and smaller sites, many of which store the original untouched
• Photos in a shared cloud folder or link
• Photos attached to a document or PDF

The rule of thumb: if the platform did not visibly recompress your image, assume the metadata is intact. And "it usually gets stripped" is a weak guarantee for something you cannot take back.

Turning it off at source

Every phone lets you stop recording location in photos, and this is the fix that requires no ongoing effort:

• iPhone: Settings → Privacy & Security → Location Services → Camera → Never
• Android: open the Camera app → Settings → turn off Location tags (wording varies slightly by manufacturer)

This stops new photos from carrying coordinates. It does nothing to the thousands already on your device.

Removing it from existing photos

The simplest method is to re-encode the image. Decoding a photo and saving it again writes out pixel data with no metadata attached — the tags are simply not carried across. That is what "download without metadata" does, and it is also a side effect of compressing or resizing an image.

So if you are already compressing photos before uploading them, you are stripping the metadata as a bonus. If you are not, one pass through a metadata tool does it in a step.

Worth checking before you strip: look at what is in there first. People are consistently surprised, and seeing your own home coordinates written into a photo file is the thing that makes this stick.

When you want to keep it

Not always a problem to solve. Keep the metadata when:

• You are a photographer and the settings are how you learn
• The date is what makes your archive searchable
• The image is evidence, where provenance data matters
• You are sharing with people who need it

The point is not that metadata is bad. It is that it should be a choice, made deliberately, rather than something that happens by default to every photo you have ever taken.