A photo straight from a phone camera is two things: the picture you see, and a hidden record of when, where and with what it was made. That record can include the exact coordinates, the time to the second, the phone model, a serial number and, after editing, the name of the app you used. Before you post a picture of something you are selling, send a photo of your front door or upload a picture to an account you would rather keep anonymous, it takes less than a minute to see what the file says and remove it.
This guide walks through what those details give away in real situations, how precise a location tag is, why the timestamp is less trustworthy than it looks, and a five-step check to run before you share.
Four ordinary situations where metadata says too much
Selling something from home
You photograph an old armchair in your living room and attach the photos to a listing on a classifieds site. If the site passes the original files through, a buyer who saves one and opens its details gets your coordinates. The listing only said which town you are in; the photo points to your building, and with the time stamp, to a weekday evening when you were clearly at home. Nothing about this requires skill: many image viewers and file browsers show the location on a small map in the info panel.
Posting while you are away
A beach photo posted on the second day of a two-week trip tells followers your home is probably empty. Location and time tags make the pattern exact, and a run of photos taken at the same spot on weekday mornings shows your commute or your child’s school. Posting afterwards, from a cleaned copy, removes most of that risk.
Keeping two accounts apart
Many cameras write their own serial number into each picture, and some also record the lens serial number or an owner name typed into the settings years ago. If you run a pseudonymous account and a named one, and you post original files from the same camera on both, that serial number ties them together as surely as a signature.
Cropping out something private
EXIF can hold a small preview picture, commonly 160 × 120 pixels, next to the main image. Well-behaved editors rebuild or delete it when you crop or blur a photo, but a program that only rewrites the main picture leaves the old preview in place. The result is a file whose visible image is cropped and whose thumbnail still shows the whole scene: small, but often enough to recognise a face or read a large sign.
How exact is a location tag?
The coordinates in a photo are stored as degrees, minutes and seconds with fractions, and most viewers show them as decimal degrees. Each extra decimal place narrows the area ten times. North to south, one degree is about 111 kilometres everywhere on Earth; east to west, it shrinks toward the poles, so at 50 degrees latitude it is only about 64 percent as long.
| Decimal places | North–south | East–west at 50° latitude | Enough to find |
|---|---|---|---|
| 1 | 11.1 km | 7.2 km | A city or a large town |
| 2 | 1.1 km | 715.6 m | A district or a village |
| 3 | 111.3 m | 71.6 m | A street or a large field |
| 4 | 11.1 m | 7.2 m | A single building or garden |
| 5 | 1.1 m | 72 cm | One side of a house, a doorway |
| 6 | 11 cm | 7 cm | Far finer than any phone can measure |
A phone with a clear view of the sky typically gets within about five metres, so coordinates with four or five decimals are the realistic level: the right building and often the right side of it. Indoors the position may come from nearby Wi-Fi networks instead and can be off by tens of metres, but it still lands in the right neighbourhood. Unless you changed a setting yourself, assume the full value is there.
Timestamps: revealing, but not proof
Most photos carry up to three times: when the picture was taken, when it was digitised (usually the same moment), and when the file was last modified, for example by an editor. Newer files add the time zone offset, such as +02:00, which on its own says roughly where in the world the camera was set. A GPS timestamp in universal time can appear as well.
These times come from the device clock. A camera whose clock was never set, or was not changed after travelling, records the wrong time with complete confidence, and anyone can edit the values afterwards. So a timestamp is good at revealing your habits and a poor way to prove when something happened. If you need to show when a photo was taken, keep the untouched original and a record of when you sent it, rather than relying on the tags alone.
A five-step check before you share
- Open the file in a metadata viewer. The EXIF Viewer & Remover shows the location at the top of each card, or says there is none. Check the file you are actually going to send, not the one in your gallery, because exporting and converting can change what is inside.
- Scan the full list for names and numbers. Look for owner or artist names, copyright lines, body or lens serial numbers, and captions or keywords added by an editing program.
- Look at the picture as a stranger would. House numbers, car number plates, school uniforms, a letter on the table, the view out of the window and reflections in glass or sunglasses identify places better than coordinates do.
- Read the file name. A name like a date and time stamp shows when the photo was taken even after the tags are gone, and a name you typed yourself may contain a street or a surname.
- Share a clean copy and keep the original. Remove the metadata, rename the file if needed, and share that copy. Before you download, glance at the card's Color profile line: if the text names you or a studio, switch off Keep color profile so that text is not carried into the copy. Keep the original for yourself: the date and place tags are what let photo libraries sort pictures into trips and timelines.
Stop recording the location in the first place
If you rarely need to know where a picture was taken, the simplest fix is to stop the camera from saving it. On most phones this is a location or geotag option inside the camera app’s own settings, or the location permission given to the camera app in the system privacy settings. Turning it off affects new photos only; pictures already taken keep their coordinates until you clean them.
Some phones also offer a per-share choice to leave the location out when you pick a photo to send. It is handy, but it only covers that one route, not photos copied off the phone by cable or synced to a computer. Checking the file itself is the only way to know what is in it.
When keeping metadata is the right call
Metadata is not a flaw to be erased everywhere. Photographers rely on copyright and contact fields to be credited, and exposure details help others learn from a shot. Insurance claims, property records and field surveys often need the date and place, and sending the original with its tags is exactly the point. A good rule: keep full metadata on files that stay with you or go to people who need it, and strip it from anything posted publicly or sent to strangers.
More guides
- JPEG, PNG, WebP or AVIF: Which Image Format to UseMeasured file sizes for JPEG, PNG and WebP at four quality settings on six test images, and plain rules for choosing a format for photos, screenshots and logos.
- How to Get an Image Under 200 KB, 500 KB or 1 MBMeasured width and quality settings that bring real photos under 200 KB, 500 KB and 1 MB, and why you should shrink the pixel size before lowering quality.