A few years ago, a minor internet drama played out when someone posted a photo taken "from inside their house" while bragging about their new apartment — and within an hour, strangers had pulled the exact GPS coordinates from the image file and pinpointed the building on a map. Nobody hacked anything. The location was just sitting there, inside the photo, the whole time.
Most people have no idea this happens. Here's what's actually going on, and what to do about it.
What EXIF metadata actually is
Every photo your phone or camera takes carries a small block of hidden data alongside the image itself, called EXIF metadata. It's genuinely useful stuff for organizing photos — camera model, date and time taken, exposure settings. But if your phone has location services enabled for the camera app (which is the default on most phones), it also silently records the exact latitude and longitude where the photo was taken. Not "the city" — the exact spot, often accurate to a few meters.
You don't see any of this when you look at the photo. It's invisible unless you (or someone else) specifically goes looking for it.
Where this actually becomes a problem
The risk isn't really about photos you deliberately share on Instagram or WhatsApp — most major platforms strip EXIF data automatically when you upload, precisely because of this issue. The real risk is anywhere that doesn't strip it: photos attached to marketplace listings (OLX, Facebook Marketplace), emailed directly to someone, uploaded to a forum or personal website, or sent as a raw file rather than through a social app's upload flow.
A photo of the item you're selling on a marketplace, taken inside your home, can hand a stranger your exact address before you've even spoken to them. A photo of your kid's birthday party shared "privately" via email carries the same risk if it ends up forwarded somewhere you didn't intend.
How to check if your photos have this
On an iPhone, open a photo, tap the "i" info icon — if location services were on, you'll see a small map with a pin. On Android, most gallery apps show similar details under "photo info" or "details." If you see a location listed, that data is embedded in the actual file, not just shown by your phone's app — meaning it travels with the file wherever it goes.
The fix that actually works
The most reliable fix isn't going through your phone's settings and hoping you remember to disable location for the camera every time (though that helps going forward). It's stripping the metadata from photos before you send or upload them anywhere that isn't a major social platform.
Re-saving or re-exporting a photo — even something as simple as taking a screenshot of it — typically strips EXIF data as a side effect, since the new file is generated fresh without carrying over the old metadata. But that also degrades quality and isn't practical for every photo.
A cleaner way is a tool built specifically for this: our Photo Metadata Remover shows you exactly what's embedded — camera model, date taken, and GPS coordinates if present — then strips all of it while keeping the photo at full quality. It runs entirely in your browser, so the photo itself is never uploaded anywhere in the process.
A quick habit worth building
Before you send a photo to anyone outside a mainstream social app — email, marketplace listing, forum post, personal blog — get in the habit of checking or stripping the metadata first. It takes fifteen seconds and it's the difference between "sharing a photo" and "sharing a photo plus your exact GPS coordinates."