Images Tool Box LogoImages Tool Box
Camera displaying EXIF metadata information on screen
Privacy & Metadata9 min read

EXIF Data Explained: What Your Photos Reveal About You (and How to Remove It)

EXIF metadata in your photos can reveal your GPS location, device serial number, and exact timestamps. Learn what EXIF data is, which platforms strip it, and how to remove it before sharing.

By Images Tool Box Team
Share

Take a photo with your phone right now. That single image file likely contains your exact GPS coordinates (accurate to within 5 meters), the make and model of your device, a precise timestamp, camera settings, and sometimes even your name. This hidden payload is called EXIF data, and it rides inside every JPEG, HEIC, and RAW file your camera produces. Most people have no idea it exists. Plenty of sharing methods preserve it completely.

What Is EXIF Data?

EXIF (Exchangeable Image File Format) is a metadata standard that digital cameras and smartphones write into image files alongside the pixel data. It was created in 1998 by the Japan Electronics and Information Technology Industries Association (JEITA), now part of CIPA standards, to help camera manufacturers and photo software interoperate. A JPEG could carry its own record of how it was shot.

In 2026, with smartphones that know your GPS location and cloud services that index every frame, the side effects of that design are more consequential than the benefits. A typical iPhone or DSLR photo carries 50 to 100 EXIF tags. Most are harmless. Several are not.

What Your Photos Actually Reveal

Here are the privacy-relevant fields that matter most, in rough order of risk:

TagWhat It LeaksTypical Value
GPSLatitude / GPSLongitudeExact location37.7749, -122.4194
GPSAltitudeElevation in meters52.3 m
DateTimeOriginalTimestamp to the second2026:07:15 14:32:07
Make / ModelDevice fingerprintApple, iPhone 17 Pro
LensModelMore device detailiPhone 17 Pro back triple camera
SoftwareOS version19.2.1
OwnerName / ArtistIdentity if filledJ. Smith
SerialNumberUniquely identifies deviceDNPXXXXXXXXX

GPS is the obvious risk. A photo of your living room, posted to a public forum, will by default include coordinates that point to your front door. On a phone with a clear sky view, GPS accuracy is typically 3 to 5 meters.

The less obvious risk is device correlation. Camera serial numbers are stable across the life of the device and have been used in forensic work to tie anonymous photos back to a specific camera owner. Combined with timestamps and GPS across a set of photos, someone can reconstruct your movements over weeks or months.

There is also the embedded thumbnail. EXIF includes a small JPEG preview inside the main file. On some older phones and cameras, this thumbnail was generated before any cropping or editing, meaning the thumbnail could show content you cropped out of the final image. Modern phones regenerate the thumbnail to match, but scanned or processed files can still carry stale previews.

Which Platforms Strip EXIF Automatically

This changes periodically. As of early 2026, here is the status of common sharing methods:

  • Twitter/X: Strips EXIF on upload, including GPS.
  • Facebook / Instagram: Strip EXIF on upload, including GPS. Note: they read and store your original coordinates before stripping them from the public copy.
  • WhatsApp: Strips EXIF in standard chat mode. "Original quality" mode in some versions preserves it.
  • Signal: Strips EXIF.
  • Discord: Preserves EXIF in attachments. GPS included.
  • Slack: Preserves EXIF.
  • iMessage: Preserves EXIF, including GPS. Confirmed with 2025 testing.
  • Email (most clients): Preserves EXIF untouched.
  • AirDrop: Preserves full EXIF data including GPS.
  • Cloud storage links (Google Drive, Dropbox, iCloud): Hand over the original file with everything intact.
  • Forums and marketplace listings: Most preserve metadata.

The widespread assumption that "platforms strip EXIF on upload" is dangerous. Major social platforms do, but the everyday ways people share photos (email, iMessage, AirDrop, cloud links, forum uploads) preserve it completely. The Electronic Frontier Foundation has flagged EXIF privacy as a real concern for anyone sharing photos through non-social channels.

How to Remove EXIF Data

On iPhone (iOS 17+)

Strip GPS at share time: Select the photo, tap Share, tap Options at the top of the share sheet, toggle Location off, then send. The recipient gets a photo without GPS but with the rest of EXIF intact.

Permanently remove GPS: Open the photo, tap the i info button, tap Adjust next to the location, tap No Location.

Strip all EXIF: iOS does not expose a "strip all EXIF" toggle. You need a third-party tool or a browser-based converter like our EXIF editor to remove everything.

Prevent future GPS capture: Settings, Privacy and Security, Location Services, Camera, set to Never.

On Android

Strip location via Google Photos: Open the photo, tap Share, tap Remove location at the top of the share sheet.

Disable GPS at capture: Open Camera app settings, find Location tags or Geotag photos, toggle off.

Strip all EXIF: Use a third-party app or browser-based tool. Photo Exif Editor and Exif Eraser are popular free options.

On Desktop

Windows: Right-click the file, Properties, Details, "Remove Properties and Personal Information." This strips most EXIF but leaves XMP and IPTC fields. It also sometimes misses GPS on files from non-Microsoft software.

macOS Preview: Export the JPEG and uncheck "All EXIF" in the export dialog. This drops most EXIF but preserves color profile data.

For a complete strip: Use a tool that parses the full metadata tree (EXIF, XMP, IPTC, makernotes, embedded thumbnail) and rewrites the file without them. The ExifTool command-line utility is the gold standard. For a no-install option, use our EXIF extractor which runs entirely in your browser.

Real-World Privacy Scenarios

A real estate agent photographed listings with an iPhone that had location services enabled. The photos were uploaded to the MLS through a system that preserved EXIF. Anyone who downloaded the listing photos could extract the GPS coordinates of every property the agent had visited, including their own home address. After switching to our EXIF editor to strip metadata before upload, the issue was resolved.

A journalist covering a protest shared photos with a colleague via email. The EXIF data in the JPEG attachments included GPS coordinates that pinpointed exactly where the journalist was standing, plus the device serial number. The colleague posted the photos to a public forum without stripping metadata. The journalist's location was exposed to anyone who downloaded the images.

A parent posted a photo of their child's first day at school to a neighborhood forum. The forum software preserved EXIF. The GPS coordinates in the photo pointed directly to the school's entrance. A stranger used the metadata to identify the school and showed up the next day.

Benefits of Stripping EXIF

  • Protects your home address and daily routine from anyone who receives your photos
  • Prevents device correlation across multiple photos or accounts
  • Removes embedded thumbnails that might show pre-edit content
  • Reduces file size slightly by removing metadata overhead
  • Keeps professional work private when sharing proofs or drafts with clients

Tips for Best Results

  1. Strip metadata at the source, before sharing. Do not rely on the destination platform to do it. Email, iMessage, AirDrop, and cloud links all preserve EXIF.

  2. Use a tool that strips everything. Windows "Remove Properties" and macOS Preview both leave remnants. ExifTool or a browser-based tool that parses the full metadata tree is the only way to get a clean file.

  3. Disable GPS at capture if you do not need it. Settings, Privacy, Location Services, Camera, Never. This stops new photos from recording location but does not help with photos you already have.

  4. Check your output. After stripping, open the file in an EXIF viewer and confirm the GPS, serial, and timestamp fields are gone. Half-measures leave fingerprints.

  5. Keep the original if you need the metadata. Strip a copy for sharing, keep the original for your own records. GPS data can be useful for organizing your personal photo library.

FAQ

What does EXIF data include?

EXIF data typically includes camera make and model, lens information, ISO, aperture, shutter speed, focal length, timestamp (to the second), GPS coordinates (latitude, longitude, altitude), software version, and sometimes owner name and device serial number. A typical phone photo carries 50 to 100 tags.

Do social media platforms remove EXIF data?

Facebook, Instagram, Twitter/X, and Signal strip EXIF on upload. However, they read and store your original metadata before stripping it from the public copy. WhatsApp strips EXIF in standard mode but may preserve it in "original quality" mode. Discord, Slack, iMessage, and email preserve EXIF completely.

Can someone find my location from a photo?

Yes, if GPS was enabled when the photo was taken and the file has not been stripped. GPS coordinates in EXIF are typically accurate to within 3 to 5 meters. Anyone who receives the original file can extract the coordinates in seconds using a free EXIF viewer. Use our GPS extractor to see exactly what location data your photos contain.

How do I remove EXIF data from multiple photos at once?

Browser-based tools like our EXIF editor can process batches of photos without uploading them anywhere. Everything runs locally in your browser, which matters when photos contain sensitive location data or personal information.

Does taking a screenshot remove EXIF data?

Yes, screenshots do not carry EXIF metadata from the original photo. The screenshot is a new image file generated by the OS, so it starts with a clean metadata slate. However, some operating systems add their own metadata to screenshots (timestamps, device info).

What is the difference between EXIF, XMP, and IPTC?

EXIF contains camera-generated data (settings, GPS, timestamps). XMP is Adobe's metadata format (ratings, keywords, edit history). IPTC is used mainly in journalism (photographer, copyright, captions). A complete metadata strip needs to address all three, plus makernotes and embedded thumbnails.

Related Tools

Conclusion

EXIF data is a privacy liability hiding in plain sight inside every photo you take. The GPS coordinates, device serial numbers, and timestamps it carries can reveal your home, your routine, and your identity to anyone who receives the original file. Major social platforms strip some of this data, but the ways most people actually share photos (email, messaging, cloud links) preserve it completely. The only reliable fix is to strip metadata at the source before sharing. Run your next batch through the EXIF editor and share with confidence that your location is not riding along.

IT

Images Tool Box Team

Writing about image tools, optimization, and web performance.