Guides

What Photo Metadata Reveals and How to Check It Before Sharing

6 min read

A photo straight from a phone camera is two things: the picture you see, and a hidden record of when, where and with what it was made. That record can include the exact coordinates, the time to the second, the phone model, a serial number and, after editing, the name of the app you used. Before you post a picture of something you are selling, send a photo of your front door or upload a picture to an account you would rather keep anonymous, it takes less than a minute to see what the file says and remove it.

This guide walks through what those details give away in real situations, how precise a location tag is, why the timestamp is less trustworthy than it looks, and a five-step check to run before you share.

Four ordinary situations where metadata says too much

Selling something from home

You photograph an old armchair in your living room and attach the photos to a listing on a classifieds site. If the site passes the original files through, a buyer who saves one and opens its details gets your coordinates. The listing only said which town you are in; the photo points to your building, and with the time stamp, to a weekday evening when you were clearly at home. Nothing about this requires skill: many image viewers and file browsers show the location on a small map in the info panel.

Posting while you are away

A beach photo posted on the second day of a two-week trip tells followers your home is probably empty. Location and time tags make the pattern exact, and a run of photos taken at the same spot on weekday mornings shows your commute or your child’s school. Posting afterwards, from a cleaned copy, removes most of that risk.

Keeping two accounts apart

Many cameras write their own serial number into each picture, and some also record the lens serial number or an owner name typed into the settings years ago. If you run a pseudonymous account and a named one, and you post original files from the same camera on both, that serial number ties them together as surely as a signature.

Cropping out something private

EXIF can hold a small preview picture, commonly 160 × 120 pixels, next to the main image. Well-behaved editors rebuild or delete it when you crop or blur a photo, but a program that only rewrites the main picture leaves the old preview in place. The result is a file whose visible image is cropped and whose thumbnail still shows the whole scene: small, but often enough to recognise a face or read a large sign.

How exact is a location tag?

The coordinates in a photo are stored as degrees, minutes and seconds with fractions, and most viewers show them as decimal degrees. Each extra decimal place narrows the area ten times. North to south, one degree is about 111 kilometres everywhere on Earth; east to west, it shrinks toward the poles, so at 50 degrees latitude it is only about 64 percent as long.

Decimal placesNorth–southEast–west at 50° latitudeEnough to find
111.1 km7.2 kmA city or a large town
21.1 km715.6 mA district or a village
3111.3 m71.6 mA street or a large field
411.1 m7.2 mA single building or garden
51.1 m72 cmOne side of a house, a doorway
611 cm7 cmFar finer than any phone can measure

A phone with a clear view of the sky typically gets within about five metres, so coordinates with four or five decimals are the realistic level: the right building and often the right side of it. Indoors the position may come from nearby Wi-Fi networks instead and can be off by tens of metres, but it still lands in the right neighbourhood. Unless you changed a setting yourself, assume the full value is there.

Timestamps: revealing, but not proof

Most photos carry up to three times: when the picture was taken, when it was digitised (usually the same moment), and when the file was last modified, for example by an editor. Newer files add the time zone offset, such as +02:00, which on its own says roughly where in the world the camera was set. A GPS timestamp in universal time can appear as well.

These times come from the device clock. A camera whose clock was never set, or was not changed after travelling, records the wrong time with complete confidence, and anyone can edit the values afterwards. So a timestamp is good at revealing your habits and a poor way to prove when something happened. If you need to show when a photo was taken, keep the untouched original and a record of when you sent it, rather than relying on the tags alone.

A five-step check before you share

  1. Open the file in a metadata viewer. The EXIF Viewer & Remover shows the location at the top of each card, or says there is none. Check the file you are actually going to send, not the one in your gallery, because exporting and converting can change what is inside.
  2. Scan the full list for names and numbers. Look for owner or artist names, copyright lines, body or lens serial numbers, and captions or keywords added by an editing program.
  3. Look at the picture as a stranger would. House numbers, car number plates, school uniforms, a letter on the table, the view out of the window and reflections in glass or sunglasses identify places better than coordinates do.
  4. Read the file name. A name like a date and time stamp shows when the photo was taken even after the tags are gone, and a name you typed yourself may contain a street or a surname.
  5. Share a clean copy and keep the original. Remove the metadata, rename the file if needed, and share that copy. Before you download, glance at the card's Color profile line: if the text names you or a studio, switch off Keep color profile so that text is not carried into the copy. Keep the original for yourself: the date and place tags are what let photo libraries sort pictures into trips and timelines.
Worth knowing: a cleaned JPEG opens looking exactly the same, because a sideways original gets a small orientation tag written straight back in. PNG and WebP copies skip that step, so if the original had a non-default rotation tag, the clean copy can end up lying on its side; the tool tells you when that is the case. Beyond that, only the hidden descriptive blocks are left out.

Stop recording the location in the first place

If you rarely need to know where a picture was taken, the simplest fix is to stop the camera from saving it. On most phones this is a location or geotag option inside the camera app’s own settings, or the location permission given to the camera app in the system privacy settings. Turning it off affects new photos only; pictures already taken keep their coordinates until you clean them.

Some phones also offer a per-share choice to leave the location out when you pick a photo to send. It is handy, but it only covers that one route, not photos copied off the phone by cable or synced to a computer. Checking the file itself is the only way to know what is in it.

When keeping metadata is the right call

Metadata is not a flaw to be erased everywhere. Photographers rely on copyright and contact fields to be credited, and exposure details help others learn from a shot. Insurance claims, property records and field surveys often need the date and place, and sending the original with its tags is exactly the point. A good rule: keep full metadata on files that stay with you or go to people who need it, and strip it from anything posted publicly or sent to strangers.

More guides