What Is EXIF Data, and Why Your Photos Are Leaking More Than You Think

Every time your phone takes a photo, it doesn't just save the image's pixels — it also embeds a small, invisible block of data right inside the file: where the photo was taken (exact GPS coordinates), the precise moment, which device took it, and what camera settings were used. That block is called EXIF, and it travels attached to the photo unless someone deliberately strips it out — which almost nobody does.

What EXIF actually is

EXIF stands for Exchangeable Image File Format, a standard that defines how technical metadata is stored inside a digital photograph. There's nothing hidden or malicious about it by design — it was created so a professional photographer could look back, years later, and see exactly which camera and settings were used for a given shot. The problem isn't that EXIF exists; it's that most people have no idea it's there, and some of that data is far more sensitive than it looks at first glance.

A typical EXIF file from a phone photo can include:

• Exact GPS coordinates — precise latitude and longitude of where the photo was taken, sometimes accurate to within a few meters.
• Exact date and time of capture, down to the second.
• Device model — brand, model, and sometimes even the operating system and its version.
• Camera settings — aperture, shutter speed, ISO, whether flash was used.

Why this is a real problem, not a theoretical one

The most commonly cited — and verified — case is that of a former CIA director who, after photos of his yacht vacation were published in the press, was located thanks to the GPS data embedded in the files. You don't need to be a public figure for this to matter: any photo taken inside your own home and uploaded to a forum, a group chat, or a secondhand marketplace listing can reveal your exact address to anyone who knows to check the EXIF data — and you don't need to be an expert, either; there are free websites that show it the moment you upload an image.

The good news is that the major social platforms — Instagram, Facebook, WhatsApp, X — automatically strip EXIF data when you upload a photo, precisely for this reason. The bad news is that not everything you share goes through those platforms: an email, an attachment on Slack or Discord, a classifieds website, or a folder shared via WeTransfer will normally keep the original file intact, EXIF and all, exactly as it came out of your camera.

How to tell if one of your photos carries GPS data

By default, most smartphones enable location tagging on the camera — it's a feature meant to organize your photo library by place, not to expose you, but the side effect is the same either way. On iPhone, you can check and disable it under Settings → Privacy & Security → Location Services → Camera. On Android, the option usually lives inside the Camera app's own settings, under "Location tags" or "Save location."

Turning off geotagging only affects photos you take from that point forward — anything you've already saved still carries whatever EXIF data was embedded at the time, so the option that actually works is to strip the file before you share it, rather than trusting whatever app you're using to do it for you.

How to remove EXIF metadata from a photo

The simplest way, without installing anything or trusting an unfamiliar website with your photo:use the "Remove EXIF metadata" option in SMALLIMG. Upload the image, pick that option, and download the result — the whole process happens right in your own browser, so the original photo (EXIF intact) never leaves your device for any server. In fact, any format conversion in SMALLIMG strips EXIF as a side effect, because re-encoding an image rebuilds it from scratch out of its pixels — which is one reason converting formats also happens to be, without you even meaning it, a way of cleaning up metadata.