Your Phone Photos Leak More Than You Think: 7 Hidden Details
You crop a photo, blur a name, check that nothing personal is visible, and send it. Job done?
Not quite. What you see on the screen is only part of the file. Behind the pixels sits a block of metadata that most people never look at, and some of it says more about you than the photo does.
Here are seven things a phone photo can reveal, and how to clean them up in under a minute.
1. Exactly where you were standing
If your camera app has location access, it can write GPS latitude and longitude into every photo, sometimes with altitude. Paste those numbers into any map and you get the spot where the picture was taken.
A photo of something you are selling, taken in your living room, can therefore point to your home.
2. When you took it, to the second
EXIF stores the capture date and time, often with a time zone offset. That is handy for sorting your gallery, but it also documents routines: when you are at the gym, when you are away on holiday, or when a photo was really taken versus when you said it was.
3. Which phone you own
The make and model of your device is a standard field. On its own it is minor, but combined with other details it helps someone build a picture of you, and it tells a scammer whether to pitch you an iPhone or Android “support” trick.
4. Your camera’s fingerprint
Some cameras, especially dedicated ones, record extra manufacturer data known as MakerNotes, which can include details like a body serial number. Phones vary in what they store, but it is a reminder that “camera settings” can be more specific than ISO and shutter speed.
5. What you used to edit it
A Software tag often records the app that last saved the file. That can reveal that a “straight out of camera” photo was edited, or simply which tools you use.
6. The part you cropped out
This is the surprising one. Many JPEGs carry a small embedded thumbnail in their metadata, used for quick previews. Some editing tools have historically updated the main image but left the old thumbnail alone. The result: a cropped or redacted photo whose hidden preview still shows the original.
It has been documented for years, including a 2005 security advisory on the issue. Modern apps are generally better behaved, but if you redact something sensitive, wiping metadata is the safest way to make sure no stale preview survives.
7. Captions, names and copyright notes
Beyond EXIF, standards like IPTC and XMP can hold captions, keywords, author names and copyright text. Useful for photographers, but potentially personal if you forgot they were there.
When does this actually matter?
Not every share is risky. Many large social platforms re-process uploads and strip location from the public copy. The leaks usually happen when the original file travels:
- Email attachments
- Shared cloud links (Drive, iCloud, Dropbox)
- Files sent as “document” or “file” in messaging apps to keep quality
- Uploads to forums, websites or marketplaces that do not re-process images
- AirDrop, Nearby Share or USB transfers to people you do not know well
Behaviour differs between apps and versions, so the safe rule is simple: if you are not sure, assume the metadata is still there.
How to check a photo in 30 seconds
- Android: open the photo in Google Photos or your gallery and swipe up or tap the (i) icon.
- iPhone: open the photo in Photos and swipe up or tap (i).
If you see a map or place name, the photo carries location. These panels only show a summary, though. Fields like the software tag, MakerNotes or embedded thumbnail stay hidden.
How to remove it properly
ExifTool is our free app for Android and iPhone, built on Phil Harvey’s long-established ExifTool engine. It reads EXIF, GPS, IPTC, XMP, MakerNotes, ICC profiles, ID3 and more, and files you open are processed on your device rather than uploaded to us.
- Open the photo, or select several for a batch.
- Review every tag, not just the summary.
- Remove only GPS if you want to keep camera details, or wipe all metadata in one tap.
- Save and share the cleaned copy.
It also handles video (MP4, MOV, MKV, AVI) and audio (MP3, FLAC, OGG), and lets you batch-edit, fix capture dates, change a geotag or export metadata to CSV.
Stop location being written in the first place
- iPhone: Settings > Privacy & Security > Location Services > Camera > Never. For a single share, tap Options at the top of the share sheet in Photos and turn off Location; check this each time you share.
- Android: open your camera app’s settings and turn off the option called something like Save location or Location tags. The name varies by manufacturer.
These settings only affect new photos. Older ones keep their coordinates until you clean them.
Quick recap
- Photos can reveal location, time, device, editing software, captions and sometimes an outdated preview.
- The risk is highest when you share the original file.
- Gallery info panels show only a summary.
- Strip GPS or all metadata before sending photos to people you do not know.
Want the full background? Read what EXIF data is and how to remove it, or learn how to batch remove GPS location from photos. On iPhone, see ExifTool for iOS.
Then get ExifTool and check the last photo you sent. You may be surprised.
FAQ
Do social networks remove photo metadata?
Many large platforms strip location and most metadata from the public copy of an image. The bigger risk is sharing the original file by email, cloud link, or as a document attachment in a messaging app, where metadata often stays intact.
Can a cropped photo still show the original image?
It can happen. Many JPEGs include a small embedded preview thumbnail, and some editing tools have historically left that thumbnail untouched after a crop. Wiping metadata removes the embedded thumbnail along with the rest.
Will removing metadata change how my photo looks?
No. Metadata is stored separately from the image pixels, so removing or editing it does not change the picture itself.
Quickly view, modify or remove EXIF, GPS, IPTC and XMP data from photos, video and audio on Android. Free and offline-capable.