Remove EXIF Data

EXIF is a metadata standard that cameras and phones write directly into the image file alongside the pixel data, and it is far more detailed than most people expect. Beyond the obvious — date, time, camera make and model — a typical phone photo also embeds the exact exposure settings, the lens used, the device's serial number in some cases, and on almost every phone with location services enabled, the GPS coordinates accurate to within a few metres of where the shutter was pressed. None of this is visible when you look at the image; it travels invisibly with the file until something either reads it or strips it.

This is genuinely useful metadata in a personal photo library — it is how photo apps sort by location and date automatically. It becomes a privacy problem the moment the same file is shared publicly, because a photo posted to a forum, sent to a stranger, or attached to a listing carries that coordinate data along with it by default, and most people sharing the photo have no idea it is there.

Major social networks generally do strip EXIF data from images on upload, which is part of why the practice is not more widely known as a risk — most people's experience is that photos on their favourite platform "just work" without a location leaking. But this is a per-platform, per-feature behaviour rather than a universal guarantee, and it is not something to rely on for anything outside those specific apps. Email attachments, cloud storage links, direct messages, forum uploads, marketplace listings and cloud photo backups all commonly preserve the file exactly as it was taken, metadata included.

The safer default for anything leaving your control through a channel you have not specifically verified is to strip the metadata yourself first, rather than trust that wherever it ends up will do it for you.

Stripping metadata silently would be simpler to build, but it would also mean taking on faith that anything was there to remove in the first place, and it would waste the one genuinely useful moment this process offers — the chance to actually see what a photo has been carrying. Displaying the GPS coordinates, camera details and timestamp before they are removed turns an abstract privacy warning into a concrete fact about a specific file, which is a more effective way to build the habit of checking than a generic notice would be.