Metadata hidden in photos and files can reveal where you were, when you were there, and details you never intended to share.
The Information You Share Is Not Always Visible
A photo may show nothing more than a meal, a pet, or a view from a window. But the image itself may not be the only information being shared.
Digital files often contain metadata: information that describes the file, its creation, or its context. Depending on the file and device, metadata can include the date and time it was created, the device or software used, the author’s name, and even GPS coordinates.
That does not mean every photo or document exposes your location. Metadata is normal and often useful. The privacy risk depends on what information exists, where it is stored, and how the file is shared.
It also helps to separate three different ways location can be exposed:
| Location source | Where the information exists | Example |
|---|---|---|
| Embedded metadata | Inside the file | GPS coordinates in a photo |
| App or service data | In an account or online service | A location stored by a photo app |
| Other location signals | Outside the file | IP address, Wi-Fi data, browser location, or visible landmarks |
Understanding that difference makes it much easier to control what other people can learn about you.
What Is Metadata?
Metadata is information that describes other data.
In a photograph, the visible image is the main content. Metadata may describe how, when, and where that image was created.
Photo metadata can include:
- Date and time taken
- GPS latitude and longitude
- Camera or phone make and model
- Image dimensions
- Camera settings
- Orientation
- Editing software
- Copyright information
- Author information
- File creation or modification dates
- A manually added location
Metadata is not inherently dangerous. Photo apps use it to organize images by date, build maps of trips, identify devices, and make large photo libraries easier to search.
The privacy problem begins when metadata you find useful is also available to someone you did not intend to receive it.
How Can Photo Metadata Reveal Your Location?
Modern phones and some cameras can record a photograph’s location when the image is captured.
If the camera has permission to access location services, the resulting image may contain geographic coordinates. Apple, for example, confirms that location coordinates can be embedded in photos and videos when the Camera app has access to Location Services.
Those coordinates can potentially identify a specific property or small geographic area, depending on the accuracy of the location reading.
That could reveal places such as:
- Your home
- Your workplace
- A child’s school
- A hotel or vacation rental
- A medical facility
- A friend’s home
- A gym or club you regularly visit
- A private event
- A sensitive work site
The risk can increase when several files are examined together.
A single photograph might show where you were. A collection of photographs containing locations and timestamps could reveal patterns about where you spend time and when you are normally there.
What Is EXIF Data?
When people talk about hidden information in photographs, they often use the term EXIF data.
EXIF stands for Exchangeable Image File Format. It is a widely used way of storing technical information associated with digital images.
EXIF data can contain information such as:
| EXIF information | What it may reveal |
|---|---|
| Date and time | When the photo was captured |
| GPS coordinates | Where the photo was taken |
| Camera make and model | What type of device created it |
| Exposure settings | Technical camera information |
| Orientation | How the device was positioned |
| Software | Software used to create or edit the image |
Not every photograph contains every field.
GPS information generally depends on whether location data was available to the device and whether the camera was allowed or configured to save it.
It is also important to understand that EXIF is only one form of metadata. Metadata is the broader category and can exist in photos, videos, documents, PDFs, emails, websites, cloud services, and many other systems.
Location Information May Exist Outside the Photo
Deleting GPS data from an image does not necessarily remove every location record connected with it.
A photo application or cloud service may store location information separately from the image’s embedded metadata.
Google Photos is a good example. Google says a photo may have a location because the camera saved it, because a location was manually added, or because Google Photos estimated one. Google also distinguishes between camera-provided locations and estimated locations when photos are shared.
That means there are two different questions to ask:
Does the file itself contain a location?
and
Does the app or service have location information associated with the file?
Removing one does not automatically remove the other.
Websites and Apps Can Learn Your Location in Other Ways
File metadata is only one source of location information.
Websites, apps, operating systems, and online services may also obtain or estimate location through:
- GPS
- Nearby Wi-Fi networks
- Cellular network information
- IP addresses
- Browser location permissions
- App location permissions
- Account settings
- Previously stored location information
Precise browser geolocation is treated as a permission-controlled feature. The current W3C Geolocation standard requires express user permission before a web application receives location through the Geolocation API.
An IP address can also help a service estimate a user’s general geographic area, although it should not be treated as equivalent to precise GPS coordinates.
This distinction matters because stripping metadata from a photograph does not prevent the service receiving it from collecting location through another mechanism.
Why Location Metadata Matters
Location information can become much more revealing when combined with other data.
Imagine that a photograph contains coordinates identifying an apartment building. Your social profile contains your real name. A professional profile identifies your employer, and several older posts reveal your normal work schedule.
Individually, those details may appear ordinary. Together, they can provide a much clearer picture of where you live, where you work, and when you are likely to be at either location.
Location data may be particularly relevant to:
- Stalking
- Doxxing
- Harassment
- Technology-facilitated abuse
- Exposure of children or family members
- Social engineering
- Targeted scams
- Identification of sensitive workplaces or facilities
- Discovery of routines and movements
Privacy and cybersecurity authorities in several countries treat location information as potentially sensitive.
Canada’s Centre for Cyber Security advises removing metadata from photos before posting or sharing them because embedded information can expose personal details such as location.
In the United Kingdom, the Information Commissioner’s Office recognizes location information as data that can reveal where a person lives, works, or spends time and that may constitute personal data when linked to an identifiable person.
In the United States, Federal Trade Commission enforcement actions have repeatedly focused on precise geolocation data because it can reveal people’s movements and visits to sensitive locations. In 2026, the FTC announced an order restricting Kochava and a subsidiary from selling or sharing sensitive location data without affirmative express consent.
Does Social Media Remove Photo Metadata?
Sometimes, but you should not depend on it.
Social networks and messaging platforms often process uploaded images by resizing, compressing, or generating new versions. That processing may remove some embedded metadata.
Australia’s eSafety Commissioner notes that some platforms automatically hide or remove photo metadata, while warning users to check what information is actually being shared.
The problem is that behavior can vary between:
- Social networks
- Messaging apps
- Email attachments
- Cloud-storage links
- Shared albums
- Original-file downloads
- Mobile and desktop applications
- File formats
- Different sharing methods within the same service
A publicly displayed copy may have metadata removed while an original-file download preserves more information.
If a location is sensitive, the safer approach is to remove unnecessary location metadata before sending or uploading the file rather than assuming another service will do it for you.
Can Google Photos Share Your Location?
Google Photos demonstrates why photo-location privacy is more complicated than simply checking an EXIF field.
Google says locations in Google Photos are private by default, with location sharing controlled through sharing features. It also distinguishes between locations saved by a camera, locations added by a user, and locations estimated by Google Photos.
For example, Google states that an estimated location is not shared when a photo is shared through Google Photos. Camera-saved location information can behave differently, and downloading a file and sending it outside Google Photos may expose the original location saved by the device.
The practical lesson is simple:
A location stored in a cloud account and GPS metadata stored inside the original file are not necessarily the same thing.
Check both when privacy matters.
Metadata Is Not Limited to Photos
Photos get most of the attention because GPS coordinates can create an obvious privacy risk, but many other files contain metadata.
Videos
Video files can contain information about:
- Capture date and time
- Device or camera
- Editing software
- Technical settings
- Location
Exactly what is stored depends on the format, device, application, and export process.
Word Documents, Spreadsheets, and Presentations
Office files can contain:
- Author names
- Document properties
- Comments
- Revision information
- Hidden content
- Editing history
- Custom properties
Microsoft provides Document Inspector in supported Office applications to identify hidden data and personal information before documents are shared. Microsoft recommends inspecting a copy because some removed information may not be recoverable.
PDFs
PDF files may contain metadata such as:
- Author
- Title
- Subject
- Creation date
- Modification date
- Creator software
- Producer software
- Keywords
A PDF may not contain GPS coordinates, but its properties can still reveal useful information about who created it, when it was created, or what software environment produced it.
Emails contain metadata too, including information in message headers and server records.
Depending on the system, email metadata can include:
- Sender and recipient information
- Timestamps
- Mail servers involved in delivery
- Message identifiers
- Routing information
- Authentication results
This is different from GPS information embedded in a photograph, but it reinforces the same principle: digital information usually has context surrounding the visible content.
A Photo Can Reveal Your Location Without Metadata
Removing metadata does not make a photograph anonymous.
The visible content itself may reveal where it was taken.
Location clues can include:
- Street signs
- Storefronts and business names
- House numbers
- Vehicle license plates
- School uniforms
- Transit stations
- Distinctive buildings
- Mountains, coastlines, or skylines
- Reflections in windows or mirrors
- Mail and packages
- Event banners
- Local architecture
- Screens showing Wi-Fi network names
Google Photos itself warns that people may be able to infer a location from landmarks even when location information is not shared.
Image search and computer-vision tools can make some of these clues easier to analyze.
So before sharing a sensitive image, check two things:
- What information is stored in or associated with the file?
- What can someone learn simply by looking at the image?
Removing GPS metadata solves only the first problem.
How to Check a Photo for Location Metadata
The exact process depends on your device and software.
On an iPhone or iPad
Open the photo in the Photos app and view its information.
If location information is present, you may see a location name or map associated with the image.
Review this information before sending a sensitive photograph.
On a Mac
Apple’s Preview app can display location information stored in supported images.
Open the image and use the location-information controls to check whether GPS data is present.
On Windows
Windows Photos can use latitude and longitude embedded in photographs to identify where an image was taken.
You can also inspect supported file information through File Explorer and the file’s properties.
With Metadata-Inspection Software
Specialized metadata tools can display EXIF and other metadata fields in detail.
For sensitive files, prefer reputable software that works locally on your device.
Uploading a private photograph to an unknown “EXIF checker” or metadata website creates another copy of the file and may introduce an unnecessary privacy risk.
How to Remove Location Metadata From iPhone Photos
Apple provides several ways to control photo-location information.
Remove the Location From an Existing Photo
On current iPhone and iPad software:
- Open the photo in Photos.
- Open the photo’s additional options.
- Select Adjust Location.
- Choose No Location.
Apple documents this process for removing the location associated with an existing photo.
Share a Photo Without Its Location
If you want to keep the location in your own library but avoid sharing it:
- Open the photo.
- Tap Share.
- Open Options.
- Turn off Location before sending.
Apple currently provides this control in its photo-sharing interface.
Stop New Photos From Recording Location
To prevent the iPhone Camera app from collecting location metadata:
Settings → Privacy & Security → Location Services → Camera → Never
Apple documents this setting as a way to stop location metadata from being collected by Camera.
The tradeoff is that you may lose useful location-based photo organization and search features.
How to Reduce Location Metadata on Android
Android phones vary because manufacturers use different camera apps, operating-system versions, and interfaces.
Look in your Camera settings for an option such as:
- Save location
- Location tags
- Geo-tagging
- GPS tags
Disable that option if you do not want future photographs to record where they were taken.
Do not assume instructions for one Android phone apply exactly to another. Samsung, Google Pixel, Motorola, and other devices may use different menu names and locations.
Also review any separate location information stored by your gallery or cloud-photo service.
How to Remove Hidden Information From Office Documents
Documents can expose personal or organizational information even when they contain no GPS data.
For supported Microsoft Office applications, a practical inspection process is:
- Save a copy of the file.
- Open File → Info.
- Select Check for Issues.
- Choose Inspect Document.
- Review the information detected.
- Remove anything you do not intend to share.
- Inspect the file again.
- Share the cleaned copy.
Microsoft’s Document Inspector can detect several forms of hidden information and document properties.
Always check converted files separately. Exporting a Word document to PDF or an image to another format can change which metadata is retained.
Should You Disable Photo Geotagging Completely?
Not necessarily.
Location metadata can be useful.
It can help you:
- Find photos from a particular trip
- Search your library by place
- Organize travel photographs
- Remember where older photos were taken
- Document field work
- Maintain professional records
- Preserve evidence or research context
For many people, the better approach is not to eliminate all metadata. It is to control when sensitive information leaves their private devices and accounts.
For example, you might keep geotagging enabled for your private photo library but remove location data before sending an original photograph publicly.
Someone facing a higher personal-security risk may reasonably choose to disable geotagging altogether.
Who Should Be Especially Careful With Location Metadata?
Anyone can benefit from understanding location metadata, but the consequences are greater for some people.
Extra caution may be appropriate for:
- People experiencing stalking or harassment
- Domestic abuse survivors
- Children and families
- Journalists
- Activists
- Military personnel
- Law-enforcement personnel
- Government employees
- Executives and public figures
- Content creators
- People using dating apps
- Employees at sensitive facilities
- Anyone trying to keep a home address private
Australia’s eSafety Commissioner specifically advises people to pay attention to metadata and geolocation information when sharing photographs and videos.
The higher the consequences of revealing a location, the more important it is to inspect files before sharing them.
Metadata Safety Checklist
Before publishing or sending a sensitive photograph, video, or document:
- Check whether the file contains GPS or location information.
- Remove location metadata if the location does not need to be shared.
- Check timestamps if the timing of the file could reveal something sensitive.
- Examine the visible image for location clues.
- Review author names, comments, revisions, and document properties.
- Check app and camera location permissions.
- Review location information stored by cloud-photo services separately.
- Avoid uploading confidential files to unknown metadata-checking websites.
- Do not assume a social-media platform removes metadata.
- Keep an original copy if you want to preserve useful metadata privately.
- Recheck the exact copy you intend to publish or send.
The Bottom Line: Know What Leaves Your Device
Metadata is useful information that helps devices and applications organize, identify, and manage digital content.
But some metadata can also reveal far more than you intended.
A photograph may contain coordinates showing where it was taken. A timestamp may reveal when you were there. A document may expose an author’s name or editing history. An app or online service may hold additional location information that is not stored inside the file at all.
And even after metadata is removed, the visible content of a photo can still reveal where you are.
You do not need to strip every piece of metadata from every file. The important habit is to understand what information accompanies sensitive content before you send or publish it.
When location matters, inspect the file, remove unnecessary metadata, review the image itself, and make the decision about what to share before someone else can make it for you.