Metadata
Photo metadata and location privacy
What images can reveal beyond their visible pixels, and how to share photographs without leaking unnecessary context.
Metadata is part of the photograph
An image file can contain capture time, device model, orientation, editing software, lens details, copyright fields and sometimes latitude and longitude. The visible scene can also reveal a location: street signs, reflections, window views, uniforms, landmarks and recurring routes.
Metadata is not automatically secret or harmful. It becomes a problem when the receiver does not need it and the information reveals a home, workplace, routine, source or another person.
Sharing is a transformation
Different services strip different fields, and a service can create new metadata when it stores or processes an image. Do not assume that sending through a chat app, uploading to a social network or converting to a new format provides the same result every time.
For a sensitive image, make a copy, inspect the copy, remove fields that are not needed, and inspect the result again. Keep the original private if it may be needed later as evidence.
The pixels still matter
Removing EXIF data does not remove the content of the image. A photograph can expose a location or identity through what it shows. Cropping, blurring and redaction can also fail if the original is available, the blurred area can be reconstructed, or the context identifies the person.
A short checklist
- Check location access before taking the photograph.
- Share a copy, not the original evidence file.
- Inspect metadata before uploading.
- Remove unnecessary location and device fields.
- Review visible background details and reflections.
Topics
Sources
- Metadata matters Accessed
- ExifTool documentation Accessed
Related archive entries
-
Archive research papers
Unique in the Crowd: The privacy bounds of human mobility (Archive)
A study of how few location points may be needed to identify people in a mobility dataset.
Related guides
-
Guide Introductory
Metadata Explained (Guide)
A worked primer on data about data: what leaks even with perfect encryption, and the measures that actually reduce it.
-
Guide Intermediate
Mobile Device Privacy (Guide)
What a phone knows that a laptop does not, which platform settings matter, and the limits of user control.
-
Guide Intermediate
Data brokers and the market for personal information (Guide)
How personal information is collected, combined, scored and resold, and where practical limits on collection begin.