Short answer: EXIF data is hidden information stored in a photo file: the phone or camera model, settings, the date and time the photo was taken, and often the GPS coordinates of the spot where you were standing. If you send the original file, the recipient can check where and when you took the photo. The simplest way to protect yourself is to turn off location tagging in your camera, remove the location when sharing (the Options button on iPhone; on Android and Windows, the tools described below), and remember that sending a photo “as a file” usually keeps all the data.
What EXIF data is and where it comes from in photos
Exif (Exchangeable image file format) is a standard describing how images and metadata are stored in files from digital cameras, smartphones, and scanners. The first version was developed by the Japanese association JEIDA and published in October 1995. Today the standard is maintained by JEITA and CIPA. This data is written automatically the moment a photo is taken, so most people don’t even know it exists.
In JPEG files, Exif data is kept in a separate part of the file (the APP1 segment, up to about 64 kB in size), and the standard also covers the TIFF format. According to the description of the standard, it does not support JPEG 2000 or GIF. The image itself looks the same with or without this data, which is why nothing is visible “at first glance.”
What a photo from your phone reveals about you: a table of EXIF fields
| Data | What it means | What the risk is |
|---|---|---|
| GPS coordinates | Latitude and longitude of where the photo was taken, sometimes altitude and camera direction | Revealing your home, school, or work address, or your whereabouts |
| Date and time | When the photo was taken (usually without a time zone) | Reconstructing your daily routine, knowing when you’re not home |
| Device make and model | Which phone or camera took the photo | Linking many photos to one author, profiling your equipment |
| Camera settings | Exposure time, aperture, ISO, focal length | Low privacy risk, but helpful when comparing photos |
| Software | Name of the program used for editing | A trace that the photo was edited, important for verification |
| Thumbnail | A preview of the photo stored in the file | May contain parts that were cropped out in the editor |
| Description and copyright | Text fields, e.g. the author’s name | Revealing your name or pseudonym |
Case study: when a photo’s metadata gave its owner away
Case 1: John McAfee and the photo that pointed to Guatemala (2012)
In 2012, VICE magazine published a photo of John McAfee, the creator of antivirus software, whom police in Belize wanted to question in connection with the death of his neighbor. A journalist from The Next Web checked the photo’s EXIF data. It showed that the photo was taken with an iPhone 4S, and the stored coordinates pointed to a compound in Guatemala with buildings, cars, boats, and a swimming pool. VICE later removed the metadata from the published photo.
McAfee first claimed on his blog that he had manipulated the EXIF data himself to mislead the authorities, then backed away from that version and blamed an “inexperienced technician” at the magazine. The lesson for us is simple: even someone aware of the risk can give away their location with a single photo if they don’t check the file before publishing. Note the other side, too: the fact that the data can be edited shows that EXIF is a clue, not irrefutable proof.
Case 2: a cropped photo that “remembered” the whole thing (2003)
The Wikipedia entry on Exif describes another problem. In 2003, in a blogger’s photos that had been cropped, the embedded thumbnail kept the full, uncropped frame, because the graphics program did not update the thumbnail. Data hidden in a file can therefore reveal more than the photo itself shows.
Illustrative examples from everyday life
The situations below do not describe specific people; they are typical scenarios that illustrate the risk.
- A for-sale listing. You’re selling a bike and upload photos taken in your apartment. If the site doesn’t strip metadata and you send the originals, the buyer (or a scammer) can read the photos’ location.
- A photo of your child at a playground or in front of their school. Sent as a file in a messaging app, it reveals recurring places and times to your family, but also to anyone who intercepts it.
- Vacation photos posted in real time. The date, time, and location confirm that you’re not at home. It’s better to post after you return.
- A photo of a document or a desk. Besides what’s in the picture, it hides information about where you work or live.
- Photos sent “as a document.” In some messaging apps, this option keeps all the metadata (see the table below).
Where EXIF data stays and where it disappears: social media and messaging apps
Many services strip metadata from public copies of photos, but not all of them and not always. The table below is based on tests published by Fast.io (April 2026), a commercial, secondary source that does not give sample sizes. Treat it as a rough guide and check your own photo by comparing the file before and after sending.
| Service | Usually strips it? | Caveats |
|---|---|---|
| Instagram, Facebook, X, TikTok, LinkedIn, Snapchat | Yes, in public copies | Private messages and higher-quality modes may differ |
| Usually yes for a regular photo | Sending as a document keeps everything | |
| Telegram | Yes for a compressed photo | Sending as a file keeps all metadata |
| Signal | Yes | Presented in the test as the strongest option |
| iMessage | No | Keeps full metadata, including GPS |
Google Photos says that by default it does not add location details to shared links, albums, and conversations unless you choose to, and it never shares estimated locations. It notes, however, that the recipient may recognize the place from landmarks visible in the photo. EXIF data is only one of the ways a photo can reveal a location.
How to check the EXIF data of your own photo
On Windows: Properties, Details tab
Right-click the photo, choose Properties, and go to the Details tab. If you find a GPS section, the file contains coordinates. If there isn’t one, the photo has no stored location (source: PCWorld).
On your phone: photo details in the gallery
Open the photo and swipe up to see the info: the date, the device, and often the place on a map. In Google Photos, location info is under the info icon.
ExifTool or a metadata viewer
Journalists who verify photos recommend ExifTool as the command-line standard and EXIF viewers for quick checks. Note: don’t upload photos containing sensitive data to online viewers, because the file itself then ends up on someone else’s server.
Practical test: send yourself a photo
Send yourself the same photo through your messaging app of choice in two ways (as a photo and as a file) and compare the metadata on both ends. You’ll learn how your app behaves in your version.
How to remove EXIF data from photos: iPhone, Android, Windows
| Device | Prevention (going forward) | Removing it from photos you already have |
|---|---|---|
| iPhone | Settings, Privacy & Security, Location Services, Camera, choose Never | When sharing: Share, Options, turn off Location. For a photo already in your library: More, Adjust Info, Adjust Location, No Location |
| Android (Samsung, Pixel) | In the Camera app settings, turn off the location toggle (Samsung: the gear in the top-left corner; Pixel: the down arrow, then the gear) | Open the photo, swipe up for details, remove the location, and save. In Google Photos: the icon next to the location, then Remove location |
| Windows | Not applicable (the data is created on the phone) | Properties, Details, “Remove Properties and Personal Information,” choose what to remove. Windows saves a copy in the same folder; send the copy, not the original |
The iPhone instructions come from Apple’s guide, and the Android ones from a 2020 Android Central article, so the interface on your phone may look slightly different. On Android, keep in mind that, according to the same source, the Google Photos app can add a location based on your location history or recognized places, even if the camera didn’t record it.
EXIF and fact-checking: what you can learn about someone else’s photo
EXIF data also helps with verification, for example when someone claims a photo shows an event from a specific day. The European Broadcasting Union (EBU) describes EXIF as a technical clue: GPS, date, device model, and software give you a lead, but “technical data is not proof; it is circumstantial evidence that needs to be verified.” The recommended steps are to compare the coordinates with several map services, check the date against weather data or public records, and document every step of the analysis.
- A lack of EXIF proves nothing. Most social media sites strip metadata, so a photo from social media usually won’t have any.
- EXIF can be changed. The McAfee example shows that claims of edited metadata do come up in practice. A “Software” field with the name of a graphics program reveals that the file was edited.
- Look for confirmation outside the file. Compare the background with maps, the shadows with the time of day and the weather, and signs and license plates with the location.
- For your own posts: remove sensitive EXIF data, especially GPS, before publishing material.
7 habits that protect your privacy with photos
Turn off location in your camera
If you don’t need a photo map, set the Camera app’s location access to “Never” or turn off the toggle in the camera settings.
Remove the location when sharing
On iPhone, use Options in the share menu. On other devices, remove the location in the photo details or use a metadata-cleaning tool.
Don’t send important photos “as a file”
Files and documents in messaging apps usually keep the full set of metadata. For private photos, choose the compressed version.
Be careful with photos tied to your home and children
Post photos taken at home, in front of a school, or at a playground without the originals and without describing the exact place.
Post with a delay
Upload travel photos after you return, not live. The background and caption alone can reveal your location.
Test your apps
Check once what stays in the file after you send a photo through your apps. The results depend on the version and the sending mode.
Watch what’s visible in the photo
A house number, a license plate, or a distinctive building reveals the location just as coordinates do, whether or not you remove EXIF.
FAQ: the most common questions about EXIF data
It’s metadata written to a photo file by a camera or phone: the device model, settings, date and time, and often GPS coordinates. The Exif standard was developed in 1995.
It can, if the camera records location and you send the original file. The coordinates of a photo taken at home point to where you live. Turn off location in the camera or remove it when sharing.
According to tests by Fast.io from April 2026, public copies of photos on the major platforms are stripped of metadata, but private messages may differ, and the platform usually keeps the original data on its end. This is a secondary source, so check your own case.
According to the same tests, a regular, compressed photo is usually stripped of metadata, but sending it as a document or file keeps it in full. iMessage keeps full metadata, including GPS.
When sharing, choose Share, then Options, and turn off Location. For photos in your library: More, Adjust Info, Adjust Location, No Location. To stop the camera from recording location, set it to Never in Location Services.
Right-click the photo, choose Properties, the Details tab, and the option to remove properties and personal information. Windows will save a copy without the selected data, so send the copy.
No. Many services strip metadata, so its absence is normal. Conversely, data that is present isn’t proof either, because it can be edited. EXIF is a clue that needs to be confirmed by other methods.
Yes. Tools let you change metadata, and John McAfee even claimed he had changed it himself in his 2012 photo (he later backed away from that version). That’s why, when verifying a photo, you should look for confirmation in maps, weather, and background details.
A screenshot creates a new file without the original’s metadata, but at the cost of quality. If safety matters to you, check the new file in a metadata viewer.
Buy the “How to Search?” guide
Concrete methods for searching and verifying information, step by step, with dozens of examples.
See the guide → ☕Support us on Suppi
We create these materials in our free time. Every bit of support helps us write more and more often.
Support → ▶️Watch us on YouTube
The same topics in a shorter video format, with concrete on-screen examples.
Subscribe →More from our blog
Sources: Wikipedia, “Exif” (description of the standard, formats, and privacy issues); PetaPixel, “EXIF Data May Have Revealed Location of Fugitive Software Tycoon John McAfee” (December 3, 2012); The Next Web, on McAfee’s claim that he edited the metadata (December 3, 2012); Apple, “Manage location metadata in Photos”; Google, “How Google Photos protects your location data”; Android Central, “How to remove location data from photos on Android” (June 2020, secondary source); PCWorld, on removing location data from photos in Windows (February 2026); Fast.io, “Which Social Media Platforms Strip Photo Metadata?” (April 2026, commercial and secondary source); EBU Spotlight, “Unmasking image manipulation with EXIF data & ELA”. The examples in the “Illustrative examples” section are scenarios, not descriptions of specific people. App behavior and interfaces may change.