Every photo you take with a smartphone carries more than a visible image. Embedded in the file is a structured data layer — called EXIF metadata — that records where the photo was taken, what device was used, when it was captured, what settings the camera used, and sometimes more.
When you share a photo, that metadata often travels with it. The person on the other end — or the platform you uploaded to — may be able to extract it. Most people aren’t aware this is happening, because the metadata is invisible in normal use. You’d need to specifically look for it.
Understanding what travels with your photos, and what to do about it, is a practical privacy skill.
What’s Actually in Your Photo File
EXIF data (Exchangeable Image File Format) is the standard metadata container embedded in JPEG, PNG, HEIC, and most other common image formats. A typical smartphone photo might contain:
Location data — GPS coordinates accurate to within a few meters, often including altitude. If location services were enabled when you took the photo, the file records exactly where you were.
Timestamp — the exact date and time of capture, down to the second. Combined with multiple photos, this can reconstruct a detailed timeline of your movements.
Device information — the make and model of your phone or camera, sometimes including the serial number.
Camera settings — aperture, shutter speed, ISO, focal length, whether flash was used.
Software version — the OS version and camera app version at time of capture.
Orientation — how the phone was held when the photo was taken.
Some cameras and apps add additional metadata fields: lens model, copyright strings, creator names, software processing history. Raw files from higher-end cameras tend to carry more than JPEGs from phones.
Why It Matters Before You Share
The metadata risks depend on how you’re sharing and to whom.
Direct file sharing is the highest risk. Emailing a photo as an attachment, sending it via iMessage (not compressed), or uploading it as a document rather than a standard post all tend to preserve the original EXIF data intact. The recipient gets the file with all metadata included.
Specific location risks. A photo taken at your home includes your home address in the GPS data. A photo taken at a child’s school records that school’s location. A pattern of photos across multiple days maps your routine. People who don’t realize their photos include this data share it freely in contexts where they’d never write out their address.
Identity and device tracking. Device identifiers in EXIF data can serve as fingerprints across different uploads, potentially linking accounts or identities that were meant to be separate.
Reverse-engineering private information. A photo shared from what appears to be a neutral location — a park, a coffee shop — might include GPS coordinates that reveal you were actually at a medical facility, an attorney’s office, or an address you’d prefer not to disclose.
None of these risks are hypothetical. They’re the straightforward consequence of sharing a file that contains structured data most people don’t know is there.
Which Platforms Strip Metadata — and Which Don’t
The good news is that some of the most common sharing platforms automatically remove or suppress EXIF data before delivery to other users. The behavior varies significantly.
Platforms That Strip Most or All Metadata
Instagram — strips GPS coordinates and most EXIF fields when photos are uploaded. The data is no longer accessible to viewers after posting, though Instagram retains it internally.
Facebook — similarly strips most EXIF data from the version visible to other users.
Twitter/X — removes EXIF data from uploaded photos before they’re served to viewers.
WhatsApp (in standard mode) — when you share a photo in standard compressed mode, WhatsApp strips most metadata including GPS coordinates. If you share a photo as a “document” instead of a standard media message, the original file is sent intact, including all EXIF data.
Signal — strips all metadata before sending. Of the major messaging apps, Signal is the most thorough about this.
Reddit — removes EXIF data from uploaded images.
Platforms and Methods That Preserve Metadata
Email attachments — standard email preserves the original file intact. The recipient receives the same file with all EXIF data that was present when you sent it.
iMessage — unlike WhatsApp’s standard mode, iMessage sends the full original file, including all EXIF metadata. There is no automatic stripping.
Telegram — sends files intact by default. Telegram does offer a “compressed” mode for photos which may reduce file size, but it does not reliably strip GPS data.
Direct file sharing (AirDrop, Google Drive links, Dropbox shares, cloud storage downloads) — preserves the original file. Whoever downloads the file receives the complete original, metadata included.
Slack — preserves original files when shared in a workspace. The metadata is accessible to anyone who can download the file.
How to Strip Metadata Before Sharing
If you need to share a photo through a channel that preserves metadata, or if you want to be certain before sharing regardless of the platform’s behavior, removing the data before sharing is the reliable approach.
On iPhone
The simplest method built into iOS: before sharing a photo, use the Share Sheet and look for the option to adjust who can see your location. In iOS 16 and later, when you share a photo via the Share Sheet, there’s a small location icon that lets you toggle location sharing off for that specific share.
For more thorough stripping (removing all EXIF data, not just location): use a dedicated app like Metapho or ViewExif. Both let you view and remove metadata fields before sharing.
The iOS Settings approach: go to Settings > Privacy & Security > Location Services > Camera and set the camera’s location access to “Never.” This stops GPS from being embedded when you take photos in the first place — a more preventive approach.
On Android
Google Photos has a built-in option for some share flows — before sharing, look for an option to remove location. It’s not available in all contexts.
The most reliable approach on Android is a dedicated tool like Photo Exif Editor or Scrambled Exif. Scrambled Exif is open source, free, and integrates directly into the Android share sheet: you share through Scrambled Exif first, it strips the metadata, then passes the cleaned file to your intended destination.
On Mac
ImageOptim is free, open source, and well-maintained. Drag photos into it to strip all metadata and optimize file size simultaneously. It works as a batch processor for multiple files.
Preview (the built-in macOS image viewer) can remove some location metadata via the Inspector panel, but it’s not thorough — it doesn’t remove all EXIF fields.
For command-line users: ExifTool by Phil Harvey is the comprehensive solution. The command exiftool -all= filename.jpg removes all metadata from a file. It handles essentially every metadata format and image type.
On Windows
File Explorer has a basic option: right-click a photo, select Properties > Details, and look for “Remove Properties and Personal Information” at the bottom. This opens a dialog that lets you create a copy with some metadata removed. It’s not exhaustive but handles basic cases.
ExifTool works on Windows as well and is the most thorough option for users comfortable with command-line tools.
Before You Take the Photo: Preventing Metadata at the Source
Stripping metadata after the fact is reliable, but preventing it from being embedded in the first place is simpler.
Disable location access for your camera app. On both iOS and Android, you can revoke location permission from the camera entirely. Photos taken without location access will not include GPS coordinates. This is a persistent setting — you set it once and it applies to all future photos.
Use a camera app that doesn’t embed location. Some third-party camera apps offer the option to disable location tagging without revoking system-level location access, giving you more granular control.
Screenshot instead of saving. If you need to share a photo that was sent to you and want to avoid passing along any metadata from the original, taking a screenshot creates a new file with fresh (minimal) metadata rather than preserving the original file’s EXIF data.
Metadata in Non-Photo Files
EXIF is specific to image files, but similar hidden data appears in other file types.
PDFs — can contain author name, creation timestamp, last-modified date, and sometimes the software used to create the file. Adobe Acrobat and many PDF readers include options to view and remove document properties.
Word documents (.docx) — embed author information, revision history, and track changes that may remain visible when shared. The “Inspect Document” feature in Microsoft Word can identify and remove hidden data before sharing.
Screenshots — typically carry much less metadata than camera photos, because they’re generated by the OS rather than a camera sensor. But they’re not entirely metadata-free — creation timestamps and device information are sometimes present.
What Stays Private When You Store in daftei
When photos and files are stored in a private archive, the question of metadata changes character. The metadata is there — it’s part of the file — but it’s visible only to you.
Unlike a social media upload, daftei doesn’t analyze or use your file metadata for advertising, AI training, or any other purpose. The file you upload is the file you have access to, with its metadata intact for your own reference (useful for organizing by date, for example) but not shared or processed beyond the storage and retrieval function.
The metadata risk is specifically a sharing risk. Keeping your personal archive private is a way of keeping the metadata layer private too.