Not all photos carry the same risk. A photo of a sunset, a meal, or a landscape discloses relatively little. A photo taken during a cancer treatment, a weight loss journey, a pregnancy, or a mental health crisis is something else entirely — it contains information about your health, your body, your emotional state, and in many cases your location. It is, in a meaningful sense, more private than almost anything else you keep.
Most people store these photos the same way they store everything else: they take them on their phone, and the phone automatically backs them up to Google Photos or iCloud.
That default is worth examining carefully.
What Makes Health Journey Photos Uniquely Sensitive
Before getting into where to store them, it’s worth being specific about why this category of photos is different.
They document conditions you may not want broadly known. A cancer treatment timeline, physiotherapy progress photos, before-and-after images from a medical procedure, or documentation of a skin condition — these are health facts that affect insurance, employment, and relationships. People who would share freely about their daily lives often keep health details tightly controlled.
They often involve your body in intimate or vulnerable states. Health journey documentation frequently involves photos taken in medical settings, in states of physical change, or in moments of vulnerability that were captured as a record of progress, not as a social image. The context in which a photo is taken shapes its sensitivity in ways that metadata alone can’t capture.
They can document mental health conditions. Journaling through a depressive episode with photos, documenting self-harm recovery, or photographing a mental health treatment environment creates a record that many people consider more private than almost anything else. The sensitivity here isn’t just personal — it’s legally and socially protected in most jurisdictions.
They carry unintended metadata. Photos taken in a hospital, a clinic, or a therapy office carry GPS coordinates that locate them in those places. Photos taken at predictable times reveal patterns of treatment or medication schedules. A health journey photo archive is also, incidentally, a medical history.
They may have legal implications. Depending on jurisdiction, health-related photos may be subject to specific privacy protections. Employers in many places are prohibited from making decisions based on medical information; insurers have specific rules about health condition disclosure. A breach of health journey photos could create legal exposure that a breach of general photos would not.
The Default Path These Photos Take
When you take a photo on an iPhone or Android phone, the default behavior is to add it to your camera roll. From there, if you have automatic backup enabled — which is the default on most phones with Google Photos or iCloud configured — the photo is uploaded to the cloud within minutes, typically over Wi-Fi.
There is no filter. There is no gate that asks whether this photo should be treated differently. A photo taken during a chemotherapy session and a photo taken at a birthday party take exactly the same path: directly into the same Google Photos or iCloud library, indexed by date, potentially analyzed by AI features, and stored under the same terms and conditions as every other photo in your account.
This matters because the services that store your photos have specific practices around AI analysis. Google Photos uses computer vision to identify objects, scenes, and people in your photos, building searchable indexes of your library’s content. If you photograph a medical device, a hospital room, or a visible physical change in your body, those elements are being analyzed. If faces appear in the photos, facial recognition is creating embeddings that group them with other photos of the same person.
Under Google’s terms of service as updated in July, media submitted through certain services — including Lens — can also be saved and used for AI model training by default. The scope of what Google processes across its products and what it uses for training is broader in practice than a simple reading of any single settings page would suggest.
iCloud Photos runs most AI analysis on-device by default, which reduces — but does not eliminate — the amount of health-related photo content that reaches Apple’s servers for processing. When you use iCloud Photo Library, your photos are stored on Apple’s servers; the on-device AI that organizes them locally still has access to the full content.
Specific Categories and Their Risks
Cancer and Chronic Illness Documentation
People undergoing treatment for cancer or managing chronic illness often photograph themselves at intervals to track physical changes, document treatment effects, or maintain a visual record of their condition. This documentation has genuine medical and personal value. It also creates a detailed record of a health condition that many people would not want accessible beyond their own control.
These photos typically show physical changes that make a diagnosis visually apparent — hair loss, surgical scars, treatment-related weight changes, medical devices or ports. Stored in a standard cloud library, they’re indexed alongside vacation photos, with no additional access controls or privacy treatment.
Pregnancy and Reproductive Health
Pregnancy documentation — monthly progress photos, ultrasound images stored on a phone, photos from fertility treatment appointments — is another category where the content is deeply personal and where the legal stakes have increased in recent years.
Given ongoing changes to reproductive health law in the US, photos documenting a pregnancy, its progress, or its outcome carry more potential legal sensitivity than they did a few years ago. Location data embedded in these photos is particularly significant — a photo taken at a reproductive health clinic with GPS metadata is a potential record of a visit that someone may later want to be unexplainable.
Weight and Body Change Documentation
Before-and-after documentation of weight loss, eating disorder recovery, or post-surgical body changes is common. These photos are often taken for personal motivation and are genuinely private — people who share them selectively may be mortified if they appeared beyond that controlled context.
They can also reveal information about health conditions — disordered eating recovery, bariatric surgery, or conditions associated with specific body changes — that people have strong reasons to keep private from employers, insurers, and the general public.
Mental Health Documentation
Photographing a therapy office, a medication blister pack, or a mental health crisis moment is increasingly common as people document their mental health journeys. These are some of the most sensitive photos a person can take.
Unlike physical health documentation, mental health photos may not have obvious visual markers in the photo itself. But the context — where they were taken, when, alongside what other photos — tells a story that the individual may consider intensely private.
How to Protect These Photos
The goal is not to stop documenting your health journey. Visual documentation can have genuine medical value, provide motivation during difficult treatment periods, and create a personal record that has meaning. The goal is to store those photos with appropriate care.
Separate Storage from General Photos
The most practical immediate step is to keep health journey photos out of your general camera roll and into a dedicated storage location with stricter access controls.
On iPhone, you can restrict automatic backup of specific albums — by not putting photos in the main camera roll, you prevent them from being backed up by iCloud Photo Library automatically. Use a separate photo app or vault that doesn’t sync to your main cloud library.
On Android, you can configure Google Photos to back up specific folders only, excluding others. Photos saved to a folder that isn’t in your backup selection won’t reach Google Photos.
Use a Storage App with Explicit Privacy Commitments
A dedicated app for sensitive photos should meet specific criteria:
It should explicitly state in its privacy policy that it doesn’t train AI models on your content. This should be in the policy itself, not just in marketing copy.
It should use encryption at rest (AES-256 is standard) and encryption in transit (TLS 1.3 or equivalent) to protect your photos during storage and transfer.
It should give you a clear deletion guarantee — when you delete a photo, it should be permanently erased within a defined timeframe, not held in server backups indefinitely.
It should not be an advertising-funded business. Advertising-funded services have a structural incentive to analyze your content, because that analysis supports ad targeting. Services funded directly by users for storage don’t have that incentive.
Daftei stores files with AES-256 encryption at rest and TLS 1.3 in transit, commits to never selling your data or training third-party AI on your content, never shows ads, and permanently erases data after a 30-day deletion window. The free tier includes 5 GB of storage; Pro offers unlimited storage at $5.99 per month.
Strip Location Metadata Before Taking the Photo
If you’re taking photos in medical settings, consider disabling location access for your camera app before doing so. On iPhone, go to Settings → Privacy & Security → Location Services → Camera and set it to “Never.” On Android, look for the location tag setting in your camera app settings.
Stripping GPS from future health photos prevents the most obvious piece of identifying context — where and when the photo was taken — from being embedded in the file by default.
Existing photos with GPS data embedded cannot be retroactively stripped without using a dedicated tool. Apps like ExifTool (desktop) or various EXIF editors can strip metadata from batches of existing photos before you move them to a storage service.
Consider Offline Storage for the Most Sensitive Files
For photos that represent the highest sensitivity — active medical documentation with specific diagnosis information, reproductive health photos, mental health crisis documentation — offline storage is worth considering.
An encrypted external drive stores files without any internet exposure. For photos where the primary risk is unauthorized access by a third party, removing the photos from any internet-connected service is the most complete solution. The trade-off is that offline storage requires physical backups and physical security; the drive itself becomes the single point of failure.
A hybrid approach — storing sensitive photos in a private, encrypted cloud service with a separate encrypted local backup — provides both accessibility and protection.
The Platform Policies Worth Reading
Before trusting any service with health journey photos, read the relevant sections of its privacy policy and terms of service. The specific questions to look for answers to:
- Does the service analyze photo content? For what purposes?
- Is your content used for AI training? Can you opt out?
- When you delete a photo, what happens? How long until it’s permanently erased?
- Can service employees access your photos? Under what conditions?
- What data is collected beyond the photos themselves — timestamps, device information, location?
- If the company is acquired, what happens to your stored content?
These are not unreasonable questions to ask of a service you’re trusting with documentation of your health.
The Bigger Picture
We document our health journeys because documentation has value — medical, personal, motivational. The photos have worth. The question is whether the infrastructure they’re stored on is appropriate for their sensitivity.
Storing health journey photos in a general-purpose cloud photo service that uses AI to analyze content, that funds itself through advertising, and that holds broad rights to process your content under its terms of service is a mismatch between the privacy those photos deserve and the treatment they’re actually receiving.
Changing that doesn’t require a major technical effort. It requires recognizing that not all photos are the same, and making a few deliberate decisions about where the most sensitive ones live.