In short: nearly every photo your phone takes carries a hidden passport — EXIF metadata. It records the GPS coordinates of where the shot was taken, your device model, and the exact date and time. Post or send that file as-is, and the recipient can pinpoint your home address and daily routine. Social networks and messengers usually strip the geotag when they compress an image, but sending a photo as a "file," by email, or via a cloud link keeps it intact. To stay safe: turn off location recording in your camera, strip metadata before sharing, and do it on your own device rather than through a random online tool.
What EXIF is and what hides inside it
EXIF (Exchangeable Image File Format) is a block of technical data your phone's camera writes into the file the moment you press the shutter. It's invisible on the picture itself but easy to read with any file-properties viewer or a free utility. Think of it as the photo's logbook.
What metadata typically stores:
- GPS coordinates — the spot where the photo was taken, often accurate to a few meters, sometimes with altitude;
- date and exact time down to the second;
- phone or camera model and firmware version;
- shooting settings — shutter speed, ISO, focal length, flash;
- sometimes the camera's orientation and a unique device identifier.
Shutter speed and ISO are harmless. The danger is the coordinates and timestamp: together they turn an innocent picture into a pin on a map with a time attached. It's the same digital-footprint principle as app trackers — covered in our guide on removing your data from the internet.
Why a photo geotag is genuinely risky
The problem isn't one photo — it's the pattern several of them reveal. Here are the scenarios where an EXIF geotag works against you.
- Home address. A picture of your pet, renovation, or a new purchase, shot at home and sent as a file, carries the coordinates of your apartment. One frame is enough.
- Daily routine. A week of geotagged photos shows where you live and work, where you take your kids, and when you're usually out.
- Marketplace listings. Selling something on Craigslist or Facebook Marketplace, people shoot it at home. A scammer reads the metadata and learns where the item — and the seller — is.
- Children. Shots from a playground, school, or after-school club expose the fixed points of a child's route.
- An empty house. Vacation photos with an active geotag announce that your home is currently unoccupied.
None of these risks come from what's in the picture — the invisible coordinates do all the damage. So the baseline rule is: assume any file that leaves your phone unaltered carries a map of your life.
Where metadata gets stripped and where it leaks
Here's the part most people miss: different ways of sending behave differently. Public social networks usually re-encode the image on their servers and drop the EXIF from the file other users see. Direct file transfer, however, keeps everything. Use the table as a guide.
| How you send it | What happens to the geotag |
|---|---|
| Posting to a social network (Instagram, Facebook, etc.) | Usually removed from the public file during re-encoding |
| Messenger, photo sent "as image" (compressed) | Typically removed |
| Messenger, sent "as file / document" | Kept in full |
| Email attachment | Kept in full |
| Cloud link to the original | Kept in full |
| AirDrop / direct file transfer | Kept in full |
One caveat: even if a network stripped the geotag from the visible file, it may have read and stored those coordinates on its own servers. Public access is closed, but the platform still knows where the shot was taken. So it's safer not to rely on someone else's cleanup — strip the metadata yourself before uploading.
How to stop your camera from recording location
The simplest fix is to never let the camera write coordinates in the first place. New photos then have no GPS and need no cleaning. The trade-off: you lose the handy "sort by place" view in your gallery — a small privacy-versus-convenience choice.
iPhone (iOS)
Open Settings → Privacy & Security → Location Services → Camera and choose Never. From then on the camera stops adding coordinates to new shots.
Android
Open the Camera app, go into its settings, and turn off the option named something like Location tags, Save location, or Geotags (wording varies by manufacturer). You can also revoke the camera's location permission in your system app settings — how permissions work is covered in our piece on what a VPN protects against and beyond.
How to strip metadata from photos you already took
If the shots already carry a geotag, you can clean them before sharing — right on the device, no third-party sites needed.
- iPhone. Open the photo in the Photos app, tap Share, choose Options at the top, and turn off Location. The copy you send goes out without coordinates. Some iOS versions also let you remove the geotag via "Adjust" in the info panel (the "i" icon).
- Android. In Google Photos open the shot, open the menu, and pick Remove location. For batch cleaning, dedicated "metadata remover" apps from the official store are handy.
- Windows. Right-click the file → Properties → Details tab → Remove Properties and Personal Information at the bottom. You can make a clean copy or wipe metadata from the original.
- macOS. Open the photo in Preview, choose Tools → Show Inspector, then the GPS tab, and remove the location there.
About online tools. "Remove EXIF online" is tempting, but you're uploading a private photo to someone else's server. Good tools process the file right in your browser and never send it anywhere, but that's hard to verify by eye. The rule is simple: for private shots use your phone's and computer's built-in tools, and reserve online cleaners for images you wouldn't mind exposing anyway.
Checklist: sharing photos without the risk
- Turn off location recording in the camera settings on every device.
- Before posting shots taken at home, remove the location in the Share menu.
- Send personal photos "as an image," not "as a file" — compression strips the metadata.
- For sale listings, use a neutral background and cleaned images.
- Don't post geotagged vacation photos until you're back home.
- Check an important photo's metadata via file properties before sending.
- Remember that screenshots and videos also carry data — the time and device model.
- Periodically check whether your data has leaked online another way — see our guide on removing your data from the internet.
Geotag vs IP address: two different location beacons
Don't confuse the two location leaks, because you close them in different ways. An EXIF geotag reveals where a photo was taken — the past, baked into the file. Your IP address reveals where you're connecting from right now — the present, visible to every site the moment you load it.
Cleaning metadata does nothing to your IP, and vice versa. To hide your IP-based location you use a VPN: it swaps your real address for the server's, so sites see the exit point rather than your city. Incognito mode, by the way, does not hide your IP — see what incognito mode actually hides. For a complete privacy picture, close both channels: strip photos of geotags and keep your connection behind a VPN. If you're still choosing a service, take a look at LiMP VPN pricing — a no-logs connection that hides your IP on iOS and Android.
Frequently asked questions
Will the recipient see the geotag if I send a photo in a messenger?
It depends how. Sent "as an image," the messenger usually compresses the file and strips the EXIF. Sent "as a file" or "document," the metadata travels intact — coordinates included.
Do screenshots contain a geotag?
Screenshots have no GPS coordinates — they aren't captured by the camera. But technical data remains: creation date, time, and device model. For strict privacy, account for those too.
Is location saved in videos?
Yes. Video files also contain metadata, including the coordinates of the recording spot and the device model. The same measures apply: disable the geotag in the camera and clean the file before sending.
Can a VPN remove the geotag from a photo?
No. A VPN handles network traffic and hides your IP address, but it doesn't touch the contents or metadata of files. You remove a photo's geotag with your phone's or computer's own tools — different jobs.
Does the geotag come back after I delete it?
Not from the cleaned file — stripped metadata doesn't return. But if you kept the original shot with coordinates in your gallery, cloud, or with someone you already sent it to, the information survives there.
Do social networks keep my metadata even if they remove it from the published file?
They can. Stripping EXIF from a public image doesn't guarantee the platform didn't read and store those coordinates when you uploaded. It's safer to remove the geotag yourself before posting.