EXIF privacy: what is hidden in a photo
Besides the picture, a photo's metadata may record where it was taken, the time to the second and the device model, sometimes the body's serial number too. Usually harmless, but worth a minute's check before you post somewhere public.
Hands-on version: Checking EXIF and GPS before you share a photo — the three-step flow with interface screenshots, a before/after pair and the failure cases people actually hit.
1. What may be in there
| Field | Contents | Sensitivity |
|---|---|---|
| GPSLatitude / GPSLongitude | Coordinates, often accurate to within tens of metres | High |
| DateTimeOriginal | Date and time the shutter fired | Medium |
| Make / Model | Device make and model | Low |
| BodySerialNumber | Body serial number, written by some models | Medium: ties together every photo from one device |
| Aperture / shutter / ISO / focal length | Exposure settings | None |
The last row is what an EXIF watermark uses, and none of it is private. Worry about the rows above.
2. How location gets in
- Phones write location by default once the camera app has permission. On iOS: Settings → Privacy & Security → Location Services → Camera. On Android, look for "location tags" or "geotagging" in the camera app's settings.
- Most cameras have no GPS, but pair one with its phone app over Bluetooth and the phone writes location into the files, one of the things that always-on Bluetooth link does in the background.
Mark adds the settings strip right in your browser. Free, no account, nothing uploaded.
Open Mark — try one for free3. Which platforms keep it
The good news: major social platforms re-compress on upload and strip EXIF along the way. They do it to save bandwidth, and it protects you as a side effect.
Watch out for:
- Sending "the original" in a chat app, which bypasses compression and keeps EXIF intact.
- Cloud links, email attachments and AirDrop, which move the file untouched.
- Some image hosts and personal blogs, which serve the original, coordinates and all, indefinitely.
The flip side: stripping EXIF also removes the camera settings, which is why they vanish in messaging apps. The watermark guide has the fix: burn the settings into the pixels, where compression can't reach them and no coordinates tag along. Exporting from Mark always removes GPS and keeps the shooting settings; there is no switch for it.
Handing files to a third-party app is a separate question, especially an AI editor that uploads to a server: when is metadata stripped, how long is the original kept, is it used for training? The MuseFrame site has a checklist: privacy questions to ask before using an AI photo app.
4. Before you share
- Turn it off at the source. If you don't need geotags, disable location in the camera app.
- On iOS, strip it when sharing: tap "Options" at the top of the share sheet and switch Location off.
- On Windows, clear files in bulk: select them, then Properties → Details → "Remove Properties and Personal Information".
- If unsure, check first. On a Mac, use Preview's Tools → Show Inspector; anywhere, the command-line tool exiftool lists GPS fields. Mark never reads or shows GPS, so it can't do this check.
5. FAQ
Does posting to social media leak my location?
A normal post is re-compressed and stripped, so the coordinates stay behind. Sending the original keeps them, so check location data before you send full-quality files.
Do screenshots contain location data?
No. A screenshot is new pixels with no capture metadata: no GPS, no camera settings.
Does removing EXIF hurt image quality?
No. Metadata sits apart from the pixels, and deleting it changes none of them. The camera settings go too, so if you want them, make the watermark first and strip afterwards.
Do photos from a dedicated camera have coordinates?
Only if it has been paired with a phone. Most bodies lack built-in GPS, but connected over Bluetooth through the maker's app, the phone writes location into the files. You can turn that sync off in the app or camera menu.