What Your Photos Reveal About You: A Practical Guide to EXIF Metadata

Take a photo with your phone right now and it records far more than the image. Embedded inside the file is a block of data called EXIF (Exchangeable Image File Format) — and depending on your settings, it can include the exact GPS coordinates of where you stood, the second the shutter fired, the phone model you own, and dozens of technical details. Anyone who gets the original file can read all of it with free tools in a few seconds.

This is not a hypothetical problem. People have revealed their home address by posting a photo taken from a bedroom window, and journalists have used embedded coordinates to verify — or debunk — where images were really taken. This guide covers what is actually in your photos, how to check it yourself, and how to remove it when it matters.

What EXIF Data Actually Contains

The EXIF standard is maintained by CIPA, the camera industry's standards body, and virtually every camera and phone writes it. The fields that matter for privacy:

• GPS coordinates: latitude, longitude, and often altitude, precise enough to identify a specific building. Written whenever your camera app has location permission.
• Timestamps: when the photo was taken, to the second — separate from the file's modified date, and it survives copying.
• Device make and model: "Samsung SM-S928B" or "iPhone 16 Pro" — useful for profiling, and for confirming two photos came from the same person's device.
• Camera settings: aperture, shutter speed, ISO, lens, flash. Harmless alone, but part of a device fingerprint.
• Editing history: some editors add their own tags — software name, sometimes even a thumbnail of the original uncropped image.

Check It Yourself in 30 Seconds

On Windows: right-click any photo → Properties → Details. Scroll down and you'll see the camera model, capture date, and — if present — GPS coordinates in plain sight.

On a Mac: open the photo in Preview, press Cmd+I, and click the "i" (More Info) tab. A GPS tab appears only when the photo has location data, complete with a map pin.

On iPhone: open a photo and swipe up (or tap the ⓘ button). iOS shows the capture time, device, and a map of where it was taken.

On Android: open a photo in Google Photos and tap the three-dot menu (or swipe up). The details panel shows device, settings, and location.

The professional tool: ExifTool is the free, open-source utility used by forensics teams and photographers alike. Run exiftool photo.jpg and you'll see every field the file carries — usually far more than the built-in viewers display. If a field exists, assume anyone with the file can read it.

When Metadata Is Stripped for You — and When It Isn't

Here is the part most people get wrong: whether your metadata leaks depends on how the photo leaves your phone.

Usually stripped: Instagram, Facebook, X, and most social platforms remove EXIF from the copies they display (though the platform itself receives and can keep the original). WhatsApp strips metadata when you send via the photo picker — compression removes it along with quality.

Usually preserved: email attachments, cloud-drive links (Google Drive, Dropbox), USB copies, and any method that sends the original file — including messaging apps' "send as document/file" option. The very features you use to avoid quality loss are the ones that keep metadata intact.

That creates an awkward trade-off: send a photo the low-quality way and the metadata mostly disappears; send the original and everything rides along. The right answer is to strip metadata yourself first, then send the original however you like.

How to Strip EXIF Before Sharing

On iPhone

Since iOS 13 this is built in: open the photo, tap Share, tap Options at the top of the share sheet, and switch off Location (or "All Photos Data"). Apple documents the location controls in its location services guide. This only affects the copy you're sharing — your original keeps its data.

On Android

In Google Photos, open the photo → three-dot menu → Edit location → remove. To share without location in one step, Google Photos also strips location data from shared links by default (check Photos settings → "Hide photo location data"). For removing all metadata rather than just location, a small utility app like a "EXIF eraser" from the Play Store, or the ExifTool command line via Termux, does a complete job.

On Windows

Right-click the photo → Properties → Details → "Remove Properties and Personal Information." Choose "Create a copy with all possible properties removed." Free, built-in, and batch-friendly — you can select fifty photos and do them all at once.

On Mac

Preview can remove location data (Tools → Show Inspector → GPS tab → "Remove Location Info"), but not everything else. For a complete strip, ExifTool one-liner: exiftool -all= photo.jpg — it writes a clean copy and keeps the original with an _original suffix.

The Turn-Off-at-the-Source Option

If you never want location in photos at all: iPhone — Settings → Privacy & Security → Location Services → Camera → "Never." Android — Camera app settings → toggle off "Save location." You lose the ability to browse your own photos by place, which some people genuinely miss — a middle path is leaving it on and stripping on share.

What Stripping Doesn't Fix

Two honest caveats. First, removing EXIF does nothing about what's visible in the image — street signs, reflections, distinctive landmarks identify locations more often than coordinates do. Second, once a file has left your hands with metadata intact, stripping your local copy doesn't un-send it. Metadata hygiene only works as a habit applied before sharing, which is why the built-in share-sheet toggles are the most useful tools on this list: they sit exactly where the mistake happens.

For photos that are already out there, it's worth knowing what you exposed: run ExifTool on the version you shared, see what it carried, and adjust the habit going forward.

The 10-Second Habit

You don't need to strip metadata from every photo of your lunch. The moments that matter: photos taken at home or work, photos of children, photos for marketplaces like Craigslist or Facebook Marketplace (taken inside your house), and anything shared with strangers. For those, the routine is: share sheet → location off (or strip the file), then send. Ten seconds, and the photo shows what you chose to show — nothing more.