Every photo you take with a smartphone silently records where you were standing. Not approximately β precisely. Latitude, longitude, and sometimes altitude, accurate to within a few metres. This information travels invisibly inside the image file, and most people share it without knowing.
This is GPS EXIF data. Understanding it takes about five minutes. Not understanding it can expose your home address, your children's school, your daily routine, or your physical whereabouts to anyone who downloads your photos.
What Is EXIF Data?
EXIF (Exchangeable Image File Format) is a standard for embedding metadata directly inside image files. Every modern camera and smartphone writes it automatically β you never opt in, it is simply there.
EXIF covers a wide range of fields: camera make and model, lens, aperture, shutter speed, ISO, date and time, colour space, and GPS location. Most fields are harmless or even useful. The GPS fields are the ones that deserve your attention.
For a full breakdown of what EXIF stores and how to view all of it, see our guide on what EXIF data is and how to remove it. To inspect any specific image file, including RAW formats from professional cameras, the RAW Metadata Viewer reads embedded data across all major formats.
How GPS Ends Up in Your Photos
On smartphones, GPS tagging is enabled by default when you grant the camera app location permission β which most people do during initial setup without reading the prompt.
On dedicated cameras, GPS is built into most mid-range and high-end bodies released in the last decade. Entry-level cameras without built-in GPS can pull location from a paired smartphone via Bluetooth. Even cameras without any GPS hardware embed the precise timestamp from their internal clock, which combined with other signals can sometimes allow location inference.
The result: the vast majority of photos taken today contain a GPS record, and the people sharing them have no idea.
The Privacy Risks
The risk is not theoretical. These are real patterns that privacy researchers, journalists, and domestic violence advocates have documented:
Your home address. A photo taken inside or just outside your home embeds the coordinates of where you live. Post it to a forum, a marketplace listing, or a dating app and anyone who downloads the file can paste those coordinates into a map.
Your children's locations. School photos, playground shots, sports day pictures β any photo taken at a location your child visits regularly encodes that location. Paedophile watchdog organisations consistently flag this as one of the most widespread accidental privacy exposures parents make.
Domestic abuse survivors. Refuge organisations advise survivors to scrub location data from every photo before sharing, because an abuser with technical knowledge can use a single photo to find a new address or safe-house.
Journalists and activists. Field photographers working in conflict zones or covering sensitive stories carry real professional and personal risk if GPS data survives in photos they share with editors or post online.
Marketplaces and classifieds. Photos taken at home and uploaded to eBay, Facebook Marketplace, or Craigslist listings have exposed sellers' home addresses to strangers. This is a well-documented vector for burglaries.
Stalking. Serial or opportunistic stalkers have used EXIF GPS data from publicly shared photos to track targets. The data is openly accessible to anyone who knows to look for it.
The GPS coordinates are invisible in the image itself. Nothing in the picture tells you they are there. That invisibility is precisely what makes them dangerous.
How to Check If Your Photo Has GPS Data
Before sharing any photo, you can check whether it contains location data in about ten seconds.
Drop your photo into the tool. If GPS coordinates are present, it shows them immediately alongside a map pin. It reads JPEG, PNG, TIFF, HEIC, and WebP files entirely in your browser β nothing is uploaded to any server.
This is useful even for photos you received from others. If someone sends you an image and you want to know where it was taken, this tool will tell you.
How to Remove Location Data From Photos
Removing GPS data before sharing is straightforward.
This tool removes GPS and all other location-related EXIF fields from your photo. Drop in the file, download the cleaned version. The original is not stored. The process takes a few seconds.
If you want finer control β keeping some EXIF fields (like camera settings) while removing only the GPS fields β use the EXIF Editor, which lets you view and delete individual metadata fields selectively.
For bulk removal of all metadata from a photo, Remove Image Metadata strips everything in one pass.
What about social media? Most major platforms (Instagram, Facebook, Twitter/X) strip GPS from photos on upload. But this does not protect you when sharing files directly: email attachments, messaging apps that send original files, forum uploads, and cloud storage all preserve EXIF intact. Never rely on a third party to sanitise your photos.
What about your phone's settings? Both iOS and Android let you disable location tagging for the camera app. On iOS: Settings β Privacy β Location Services β Camera β Never. On Android: Camera app β Settings β turn off location tags. This prevents new photos from embedding GPS but does nothing for existing photos already on your device.
When You Do Want Location Data
GPS EXIF is not inherently bad β it is context-dependent.
Travel photographers and bloggers often want location embedded. It allows automatic geotagging in photo management software like Lightroom, Apple Photos, or Google Photos, which can sort images onto a map, generate location-based albums, and make a large library far easier to navigate.
Professional archiving frequently requires location metadata. News agencies, stock photo libraries, and documentary photographers often treat EXIF GPS as a provenance record β evidence that a photo was taken where and when claimed.
Scientific and field research photography relies on GPS metadata to correlate image data with geographic coordinates.
The principle is simple: keep location data when you control who sees the file and when the location adds value. Remove it when you are sharing publicly or with people you do not fully trust.
Conclusion
Your camera is recording more than the image. Every photo you share carries a silent record of where you were, and that record is accessible to anyone with a free tool and thirty seconds of curiosity.
The fix is simple and free. Check your photos with the Image Geo Extractor before sharing. Remove location data with Photo Strip Location when you do not need it.
Five seconds of caution protects information that took no effort to expose.
Which Apps Strip Your Location Data β and Which Don't
Most people assume that posting a photo through an app automatically protects them. The reality is messier. Each platform makes its own decision about whether to process your image file or pass it through untouched.
Two rows deserve extra attention.
WhatsApp compresses photos by default, and that compression process strips EXIF β including GPS. But if you tap the paperclip icon and send a photo as a "Document" rather than through the standard photo picker, the original file goes through unmodified. Anyone who receives it as a document can read every metadata field.
Telegram is the opposite of what many privacy-minded users expect. Telegram's reputation for security has led people to trust it more than they should on this specific issue. When you send a photo through the camera or gallery picker, Telegram compresses it and strips EXIF. But when you send the same file using "Send as File" β a common choice when you want to preserve quality β every EXIF field travels with it. GPS included.
The rule is simple: never assume a platform has cleaned your file unless you have confirmed it. If you are unsure, strip the metadata yourself before sending. Use Remove Image Metadata to clean the file in seconds, then share the result through any channel you choose.
Legal and Professional Implications
For most people, EXIF privacy is about personal safety. For certain groups, it carries legal and professional weight.
Journalists protecting sources. A photojournalist photographing a confidential source in a specific location risks exposing that location to anyone who later obtains the image file β including through legal discovery. News organisations with proper operational security require staff to strip metadata from all field photography before transmission. One image sent carelessly can compromise a source who trusted that their location would remain protected.
Domestic abuse survivors. Refuge organisations and legal advocates consistently identify EXIF GPS as a concrete danger. A survivor who has relocated to a new address and shares a photo taken at home β even in a private message β may inadvertently give an abuser their new location. This is not a hypothetical. Advocates have documented cases where this exact vector was used to track people who believed they were safe.
Real estate professionals. Photographs of a property interior taken before listing a home embed the GPS coordinates of that property. This is usually harmless. But for sellers who are relocating for personal safety reasons, or for high-profile individuals who do not want their home address publicly discoverable, photos uploaded to listing sites can expose the address even when the listing text deliberately omits it.
Legal proceedings and sensitive documents. Scanned documents and photographed paperwork increasingly travel as image files. A photograph of a legal document, a medical record, or a financial statement carries not just the content of the document but also the timestamp of when it was photographed, the device used, and sometimes the location. In legal contexts, metadata can be used to challenge the authenticity of a document or to argue that a photograph was taken somewhere inconsistent with a stated account.
Corporate and competitive intelligence. Photos taken at trade shows, internal facilities, or product development environments can embed timestamps and locations that reveal sensitive operational information. A photograph taken inside a restricted facility and shared casually carries metadata that could confirm or deny access.
If your work involves any of these contexts, stripping metadata before sharing images should be a default practice, not an afterthought.
Metadata Beyond GPS: What Else Your Photos Reveal
GPS coordinates get the most attention, but they are not the only EXIF fields that can identify or expose you.
Camera make and model. Your EXIF data records the exact device that took the photo β for example, "Apple iPhone 15 Pro" or "Canon EOS R5." This alone narrows down who you might be if you share photos across different platforms under different names. If someone correlates photos from two separate accounts and both show the same camera model, that is one more signal linking them to the same person.
Camera serial number. Some cameras β particularly professional DSLRs and mirrorless bodies β embed the camera's unique serial number in every image. This means that even if GPS is stripped, two photographs taken with the same physical camera can be linked to each other, and potentially to a registered owner. If you have ever registered a camera body or had it serviced, that serial number exists in a manufacturer's record somewhere.
Timestamp. The date and time a photo was taken is embedded in EXIF with precision β typically to the second. Timestamps can confirm or contradict an alibi, establish a timeline, or reveal that a photo claimed to be from one date was actually taken on another. In legal contexts, this has been used both to authenticate evidence and to expose fabricated documentation.
Editing software. If you open a photo in Photoshop, Lightroom, Affinity Photo, or any other editing application and save it, that software writes its name and often its version number into the EXIF data. A photograph that claims to be an unedited original but contains editing software metadata is immediately suspect. Conversely, the presence of specific editing software can link photos to a known workflow or individual.
None of these fields are visible in the image. You have to look at the metadata to find them. For a full breakdown of everything embedded in a specific file, the RAW Metadata Viewer shows every field across JPEG, PNG, TIFF, HEIC, WebP, and camera RAW formats.
For a deeper look at the full metadata picture β including the two other standards (XMP and IPTC) that exist alongside EXIF β see What Is EXIF Data and How to Remove It.
How to Check Your Own Photos Before Sharing
Checking a photo for metadata before you send it takes less time than reading this sentence. Here are your options, from fastest to most thorough.
Using FileCrank's metadata viewer. Drop your photo into the Image Geo Extractor or the RAW Metadata Viewer. You will see every embedded field immediately, with GPS shown on a map if coordinates are present. Nothing is uploaded β all processing runs in your browser.
On Windows. Right-click the image file and select Properties. Go to the Details tab. You will see camera information, dates, and GPS fields if they are present. You can also remove individual fields from this screen using the "Remove Properties and Personal Information" link at the bottom β though this method only removes a subset of fields, not all metadata.
On macOS. Open the image in Preview and press Command + I (or go to Tools β Show Inspector). The Exif tab shows camera data and GPS coordinates. To see and remove all metadata, the Get Info panel in Finder shows basic file information but not full EXIF content β a dedicated tool gives you the complete picture.
On iPhone. Open a photo in the Photos app, swipe up, and you will see the location shown on a map at the bottom of the sheet if GPS is present. iOS 16 and later added a way to remove location data directly: tap the location map, then tap "Remove Location" at the top right. This modifies the copy on your device but does not affect files you have already shared.
On Android. Open the photo in Google Photos, tap the three-dot menu, and select "Details." GPS coordinates appear here if embedded. Some manufacturers' default gallery apps show similar information. Removing location data from within Android's native tools is less consistent β a dedicated tool like Photo Strip Location is more reliable.
The browser-based approach is worth making a habit for any photo you plan to share publicly. It is fast, requires no installation, and works the same way on every device. For more on why browser-based tools are a safer choice than installed software for this kind of task, see Why Browser-Based File Tools Are Safer.