Why Your Photos Are Leaking Your Location (And How to Stop It)

Most people think of a photo as just the picture. The file is more than that. Wrapped invisibly around the image data is a block of text called EXIF metadata, and on virtually every phone photo taken with location services enabled, that block includes the exact coordinates of where the photo was taken.

None of this shows up when you open the photo. It shows up when someone runs the file through a tool built to read it — and increasingly, that's not a hard thing to do.

What's actually hidden inside a photo

EXIF data is a standard part of how cameras and phones save JPEG files. It was originally designed for genuinely useful purposes: helping photographers organise their work, letting editing software apply the correct rotation, recording exposure settings for people who want to learn from their shots.

The fields that matter for privacy are a small subset of a much larger standard:

None of these fields are visible in the image itself. All of them are sitting in the file, readable by anyone who knows to look.

How precise the location data really is

This is the detail that tends to surprise people. EXIF GPS data isn't a rough estimate of "somewhere in this city." It's typically accurate to within a few metres — the same level of precision your phone's mapping app uses to put a pin on a building.

Where this becomes a real problem

The risk isn't constant — it depends entirely on where the photo goes and who can access the underlying file rather than a re-compressed version of it.

• Marketplace listings. Selling something on Facebook Marketplace, Craigslist, or a similar platform often means the photo file itself, location data intact, is what gets attached or downloaded by a buyer.
• Email attachments. Sending a photo as a direct email attachment ships the original file exactly as it was saved on your device.
• Cloud storage share links. A shared Google Drive or Dropbox link typically serves the original file, not a stripped version.
• Domestic safety situations. For anyone who needs to keep a current location private from a specific person, a single shared photo can undo that privacy instantly and without any visible sign that it happened.
• Photos involving children. A photo of a child outside a school or home, shared more widely than intended, can reveal exactly where that child regularly is.
• Client and professional delivery. Photographers and designers delivering final files to a client are also handing over whatever metadata sits inside those files, unless it's deliberately removed first.

Which platforms strip this, and which don't

This is genuinely inconsistent, which is part of why it catches people out.

The hidden thumbnail problem

This is the part almost nobody knows about, and it complicates the assumption that cropping or editing a photo makes it safe.

Some cameras and editing tools store a small embedded thumbnail image directly inside the EXIF data, separate from the main visible photo. If that thumbnail was generated before you cropped or edited the image, it can still show the original, unedited version — sitting inside the file, untouched by whatever you changed afterward.

In practice, this means a photo you cropped specifically to remove a license plate, a face, a piece of mail, or a background detail can still contain that exact detail in miniature, inside the metadata, even after the visible image looks clean.

How to check what your own photos reveal

Before assuming a photo is safe to share, it's worth actually looking at what's inside it. Humanify's EXIF Remover scans a photo and shows you exactly what metadata is present before removing anything — camera details, timestamp, and GPS coordinates with a direct link to view the exact location on a map, so you can see precisely what someone receiving that file would be able to find.

This step matters on its own, separate from removal. Seeing the actual coordinates on a map tends to change people's sense of how serious this is, in a way that reading "contains GPS data" in the abstract doesn't.

How to remove it properly

Removing EXIF data correctly is not the same as just resaving the photo through any random tool. Done wrong, it can either fail to remove everything, or it can recompress the entire image as an unnecessary side effect of removing a small text block.

• 1
  Use a tool that strips metadata directly from the file

  A proper EXIF remover edits the file structure itself rather than re-encoding the whole image, which means zero quality loss — the visible photo is completely unchanged, only the hidden data block is removed.

• 2
  Check the preview before you remove anything

  A good tool shows you what's actually in the file first. If there's no GPS data and no sensitive camera details, you may not need to do anything at all for that particular photo.

• 3
  Keep your original file

  Always save the cleaned version separately rather than overwriting your only copy, in case you need the original later for re-editing or printing.

• 4
  Re-check after editing software has touched the file

  If you edit a photo after removing its metadata, some editing software re-adds its own metadata on save. Check again before sharing if editing happened after the cleanup step.

Common mistakes people make

• Assuming every platform automatically strips metadata, when behaviour varies by platform, upload method, and changes over time
• Cropping out a sensitive detail and assuming that makes the file safe, without checking for an embedded thumbnail that may still show it
• Treating email and direct messages as inherently private, when the file shared is typically the unmodified original
• Removing metadata once and assuming it stays removed, even after the file passes through other software that may re-add its own data
• Using a recompression-based "cleaner" that strips metadata but also degrades the actual image quality as a side effect

Frequently asked questions