Before you share a photo, check what travels with it. Most phone photos carry a hidden block of data called EXIF metadata: the GPS coordinates where the shot was taken, the date and time, the phone or camera model, and the exposure settings. You cannot see any of it in the picture itself, but anyone who receives the original file can read it in seconds.
The short answer: strip EXIF data before you share anything publicly, or share in a way that strips it for you. On iPhone, use the share sheet Options and turn off Location (and All Photo Data where offered) before sending. On Android, use Google Photos and choose Remove location, or turn off location tags in your camera settings for future shots. On Windows, right-click the photo, open Properties, then Details, then "Remove Properties and Personal Information". On Mac, use Photos and choose Remove Location. For full control over every field, the free tool ExifTool wipes or edits all of it. If you want a quick browser-based route, re-saving a photo through a converter such as our PNG to JPG converter or Image Compressor produces a fresh file without the original EXIF block, because the image is re-encoded from pixels rather than copied byte for byte. Always verify the result by checking the output file before you share it.
What EXIF data actually sits inside your photos
EXIF stands for Exchangeable Image File Format. It is a standard way for cameras and phones to write shooting information into the image file itself, usually in a JPG, HEIC, or TIFF. It was designed for photographers: it records how a shot was taken so software can sort, display, and edit photos intelligently. The privacy problem is that the same block also records where and when you were.
A typical phone photo can contain all of the following. Not every photo has every field, but location and timestamps are the norm on phones with location services enabled for the camera.
| Field | Typical example | Why it matters |
|---|---|---|
| GPS coordinates | Latitude and longitude to 5 or 6 decimal places | Pinpoints where the photo was taken, often to within a few metres |
| Date and time taken | 2026-10-31, 14:22 local time | Reveals your routine: when you are home, at work, or travelling |
| Device model | Phone model and sometimes lens details | Identifies your exact device, useful for fingerprinting and scams |
| Camera settings | Aperture, shutter speed, ISO, focal length | Mostly harmless, but confirms the shot is unedited and original |
| Embedded thumbnail | A small preview stored inside the file | Can survive editing and reveal the pre-crop version of an image |
| Software and edit history | App name and version used to edit | Shows which tools you use and sometimes the edit date |
The GPS figure deserves a closer look, because the precision surprises most people. Coordinates stored to 5 decimal places are accurate to about 1 metre; 6 decimal places narrows that to about 0.1 metre in theory, and in practice a phone GPS fix is usually good to within 3 to 5 metres outdoors. That is not "roughly this neighbourhood". That is "this house, this garden, this school gate". A single photo of a child, a pet, or a new car posted with its location intact can hand a stranger your home address.
Which sharing paths leak metadata, and which do not
Whether your EXIF data escapes depends less on the photo and more on how you send it. The same file can be perfectly safe one way and fully exposed another.
| Sharing path | What happens to EXIF | Verdict |
|---|---|---|
| Instagram, Facebook, X uploads | Platforms strip EXIF from the displayed image, but keep a copy on their servers | Safe from other users, not from the platform |
| Email attachment | Original file sent untouched | Leaks everything |
| Cloud link (Drive, Dropbox, iCloud link) | Recipient downloads the original file | Leaks everything |
| Messaging app, sent as a photo | App compresses and re-encodes, usually dropping GPS and most EXIF | Mostly safe, but behaviour varies by app |
| Messaging app, sent as a file or document | Original file delivered untouched | Leaks everything |
| Forum, marketplace, or small site upload | Many sites do nothing to the file | Assume it leaks |
| AirDrop or direct file transfer | Original file delivered untouched | Leaks everything |
The trap is the "sent as a file" option. WhatsApp, Telegram, and Signal all compress photos sent normally, which strips location data in the process. But if you attach the same photo as a document to preserve quality, the original file, GPS coordinates included, goes through untouched. The same applies to email: there is no compression step to save you. And on social media, remember the distinction: stripping EXIF from the public image does not delete it from the platform. You have still handed your location to the company; you have only hidden it from other users.
A worked example makes the difference concrete. Take a photo shot at home at 14:22 on a Saturday. Sent as an email attachment, the recipient can open the file properties and read the coordinates, the timestamp, and your phone model. Sent as a compressed photo in a messaging app, the recipient gets a smaller file with no coordinates and usually no timestamp. Same photo, same recipient, completely different exposure, decided entirely by which button you pressed.
Stop location being recorded in the first place
The cleanest fix costs nothing and takes under a minute: stop your camera writing GPS data at all. This only helps future photos, not ones already taken, but it removes the biggest risk at the source.
On iPhone, go to Settings, then Privacy and Security, then Location Services, then Camera, and set it to Never. On Android, open the Camera app, open its settings (the gear icon), and turn off "Location tags", "GPS tag", or "Save location"; the exact label varies by manufacturer, Samsung, Pixel, and Xiaomi all word it differently. On a dedicated camera, GPS is usually only recorded when the camera is paired with a phone app, so check that app's location setting too.
One honest caveat: turning off location does not make a photo metadata-free. It still carries the date, time, and device model. For anything public, you still want to strip the rest before posting. Think of it as two layers: stop the location at capture, strip the remainder at share time.
How to strip EXIF from photos you already have
iPhone
Open the photo in Photos, swipe up, and you will see the map and the location. To remove location from a single photo, tap the location details and choose No Location, or use the Adjust date and time screen to remove it. For sharing, the better habit is the share sheet: tap Share, tap Options at the top, and turn off Location. On newer iOS versions you can also turn off All Photo Data, which strips the full metadata block rather than just the coordinates. The original in your library keeps its data; only the shared copy is cleaned. For bulk cleaning, select multiple photos, tap Share, tap Options, and turn off Location: iOS removes it from every copy in that batch.
Android
In Google Photos, open the photo, swipe up to see its details, tap the three-dot menu, and choose Remove location. Samsung Gallery offers a similar "Remove location data" option from the share menu. These built-in options remove GPS, not every field. To wipe all EXIF fields on Android, you need an editor app: search the Play Store for a photo EXIF editor and check that it handles bulk edits if you have many photos. Read its permissions before installing; an app that demands network access to edit local files is a red flag.
Windows
Right-click the photo, choose Properties, and open the Details tab. Every EXIF field is listed there. Click "Remove Properties and Personal Information" at the bottom, then choose "Create a copy with all possible properties removed" to keep your original intact, or select individual fields to remove from the file itself. This handles JPG and TIFF well. For HEIC files from an iPhone, Windows support varies, so convert first: our HEIC to JPG converter re-encodes the image and drops the original metadata block in the process.
Mac
Open the photo in the Photos app, press Command and I for Get Info, open the Image tab, and click Remove Location next to the location field. Preview covers date edits: open the image, use Tools, then Show Inspector, and adjust the EXIF date from there. As on iPhone, removing location is not the same as removing everything; the device model and timestamps remain unless you use a dedicated tool.
Full control: ExifTool
For photographers, journalists, or anyone cleaning photos in bulk, ExifTool is the standard. It is free, cross-platform, and edits or wipes every EXIF, IPTC, and XMP field. The basic command, exiftool -all= photo.jpg, removes all metadata from a copy. It is a command-line tool, so it is overkill for one holiday snap, but nothing else matches it for completeness. After any strip, verify: reopen the file properties and confirm the GPS and device fields are gone before you share.
The browser shortcut: re-save or compress
Re-encoding an image builds a new file from the pixels alone, which leaves the old metadata behind. That is why converting or compressing a photo in your browser is a practical shortcut: upload the photo to our Image Compressor, pick a quality setting, and download the result. The output is a fresh file without the original EXIF block, and it is smaller too, which helps on slow connections. The same applies to format conversion: a JPG re-saved as PNG, or a HEIC converted to JPG, comes out without the original metadata. Two warnings, though. First, verify the output, because not every tool re-encodes; some tools copy the file untouched. Second, never upload a sensitive photo to a server-based stripper if you can avoid it: a browser-based tool that processes locally keeps the photo on your device, which is the whole point.
What stripping does not protect
Removing EXIF is necessary, but it is not an invisibility cloak. A photo can still give you away through what is visible in it: house numbers, street signs, car plates, school uniforms, reflections in windows and mirrors, and distinctive views from a window. A cropped photo can also leak through its embedded thumbnail if the stripper only cleans the main metadata and leaves the thumbnail intact, which is why a full wipe with a tool like ExifTool beats a partial one. And remember that screenshots are not a reliable shortcut: a screenshot of a photo creates a new file without the original GPS data, but it also keeps your own device metadata and degrades quality, so use a proper strip instead.
There is also a flip side worth stating plainly. Sometimes metadata is valuable and you should keep it. Photographers use EXIF to learn from their settings and prove authorship. Archivists and families use dates and locations to organise decades of photos. And in a dispute, the original metadata can serve as evidence of when and where something happened. The rule is simple: keep the original with its metadata in your own archive, and share only a cleaned copy. Never clean your only copy.
When to keep metadata, and when to strip it
Strip it before any public post, marketplace listing, forum upload, or photo sent to someone you do not know well. Strip location at minimum before posting anything taken at home, at your children's school, or at a workplace. Keep it in your private archive, and keep it when a client, editor, or agency explicitly asks for original files. If you sell photos or submit them to a stock library, the metadata is part of the product. For everything else, the default should be: clean copy out, original stays home.
If this guide made you check your own camera roll, the companion piece for documents is worth reading too: our PDF metadata guide covers the same hidden-data problem in PDFs, and our HEIC to JPG guide explains why iPhone photos need converting before they work everywhere. For the size side of the same workflow, see how to compress images without losing quality.
Frequently Asked Questions
- Does Instagram remove EXIF data from photos?
- Instagram strips EXIF data from the image other users see, so your location is not visible on your post. But Instagram keeps a copy of the uploaded data on its own servers. For full privacy, strip the metadata yourself before uploading rather than relying on the platform.
- Does WhatsApp remove location data from photos?
- When you send a photo the normal way, WhatsApp compresses it and removes location data in the process. When you send the same photo as a document to preserve quality, the original file, including GPS coordinates, is delivered untouched. Always check which option you used.
- Does converting JPG to PNG remove EXIF data?
- Usually yes, if the conversion re-encodes the image from its pixels, which is how browser-based converters work. The new PNG file does not carry the original EXIF block. Verify by checking the output file's properties before sharing, because tools that simply copy the file will preserve the metadata.
- Does taking a screenshot of a photo remove its metadata?
- A screenshot creates a new file without the original photo's GPS data, but it is a poor substitute for a proper strip: it lowers quality, it can still carry your own device and timestamp metadata, and it keeps everything visible in the frame. Use a real metadata stripper instead.
- Can someone recover EXIF data after I strip it?
- No, not from the cleaned file itself. Once the metadata block is removed and the file is saved, the data is gone from that copy. The risk is copies you already shared: anyone who received the original before you stripped it still has the full metadata.
- Does the iPhone share sheet remove all photo data or just location?
- Turning off Location in the share sheet removes GPS coordinates only. On newer iOS versions, turning off All Photo Data as well strips the full metadata block from the shared copy. Your original in the Photos library is never changed by either option.