What’s actually hiding inside your photos
A photo file is mostly pixels — but not only pixels. Alongside the image, cameras and phones write a block of invisible text fields describing how, when, and where the picture was made. There are three main kinds, and they stack up in the same file.
EXIFis the big one. Your camera or phone fills it in automatically at the moment of capture: the date and time down to the second, the make and model of the device, the lens, every exposure setting, and — if location services were on — GPS coordinates precise enough to identify a building. Some dedicated cameras go further and write hardware identifiers into EXIF, such as the camera body’s serial number, and a few even store an owner-name field. Phone photos usually don’t carry serial numbers, but the device model and software version are almost always there.
IPTCfields are the older publishing layer — captions, keywords, the photographer’s name, copyright lines. They’re mostly added by editing software rather than the camera, so a photo straight off your phone rarely has them. A photo that’s been through a desktop editor might.
XMPis the modern container that editing apps use for the same kind of information, plus edit history. Some editors record the steps applied to an image in XMP — which can quietly reveal that a photo was retouched, or what it was cropped from.
None of this shows up when you look at the picture. It only appears when someone inspects the file — which takes about three clicks on any operating system.
How much can one photo give away?
More than most people expect. GPS coordinates in EXIF aren’t vague — they typically pin the photo to within a few metres, which is the difference between “taken in London” and “taken at this house.” A single photo of a couch you’re selling, taken in your living room with location on, can carry your home address in its coordinates.
Timestamps do quieter damage. One photo tells someone when you were somewhere. A set of photos tells them your patterns — when you leave, when the house is empty, which café you sit in every Tuesday. Combine timestamps with coordinates across an album and you’ve published a rough diary without writing a word.
The device fields matter less for privacy but still say something: the exact phone or camera you own, the software you edit with, and sometimes — through edit-history entries — the fact that an image was altered at all. For most people, location and time are the fields worth caring about. They’re also the easiest to remove.
The reality check: where metadata actually leaks
Before you start stripping everything, it helps to know where the risk really is — because the biggest photo destinations already handle part of it for you.
Major social platforms generally strip EXIF from what other people see. When you upload to the big social networks, the image is re-processed on their servers, and the copies shown to and downloadable by other users generally have the metadata removed. A stranger saving your feed photo usually cannot read your GPS coordinates out of it. Two honest caveats, though. First, youstill sent the original: the platform received the full file, metadata included, and what they do with it server-side is governed by their policies, not by the stripped public copy. Second, this behaviour is the norm, not a guarantee — smaller sites, forums, and image hosts may serve your file exactly as uploaded.
Direct file shares remove nothing.Email attachments, cloud-storage links, USB sticks, AirDrop, and any messenger option labelled “send as file” or “original quality” deliver the file byte-for-byte. Whatever the camera wrote is still in there when it arrives. This is the route where stripping metadata yourself actually matters — and it’s exactly the route people assume is safest because it feels private.
So the practical rule: for anything leaving your device as a file, clean it first. Here’s how, platform by platform.
Remove metadata on Windows
Windows has a built-in remover, and it’s genuinely decent. In recent versions of Windows 10 and 11:
- Right-click the photo in File Explorer and choose Properties.
- Open the Details tab. This is also your viewer — scroll to see everything the file carries, including GPS under the “GPS” heading if present.
- Click Remove Properties and Personal Information at the bottom.
- Choose Create a copy with all possible properties removed and click OK. Windows saves a cleaned duplicate next to the original, so you keep your master untouched.
The alternative option in the same dialog — “Remove the following properties from this file” — lets you tick individual fields and scrub the original in place. The copy route is the safer habit. One limitation worth knowing: Windows removes the properties it understands, which covers the sensitive ones — location, device, dates — but obscure maker-specific fields can survive. For everyday sharing it’s fine; for a guaranteed clean slate, use the conversion method below.
Remove metadata on a Mac
macOS is the odd one out: it shows metadata well but has no one-click full removal built in.
To see what’s in a photo, open it in Preview and press Cmd+I(Tools → Show Inspector). The Inspector’s info panel has tabs for general details and EXIF, and if the photo contains coordinates, a GPS tab with a map of exactly where it was taken.
To remove the location, that same GPS tab has a Remove Location Info option in recent macOS versions — one click and the coordinates are gone. That covers the most sensitive field, but Preview stops there: the camera model, timestamps, and the rest of the EXIF block stay.
For photos in the Photos app, export a cleaned copy: select the photo, then File → Export → Export 1 Photo, and untick Location Information(and the title/keywords option if you’ve added those) before saving. Again — location and your own labels, not a full strip.
For a complete strip on a Mac, you need either a third-party utility or the re-encode route: run the photo through a converter that rebuilds it from pixels, which drops every metadata block at once. That’s the method covered in a moment, and it works in any browser with nothing installed.
Remove metadata on an iPhone
iOS has become quite good at this — if you know where the switches are.
To see a photo’s metadata(iOS 15 and later): open it in Photos and swipe up, or tap the “i” info button. You’ll see the capture date, device, camera settings, and a map if location was recorded.
To share without location: pick your photos, tap Share, then tap Options at the top of the share sheet and switch Locationoff. The copies you’re sending go out without GPS data. Two things to note. The toggle applies to that share only — it resets next time. And it removes location only: the device model and timestamps still travel with the file.
To remove location from the photo itself: in recent iOS versions, open the info panel, tap Adjust next to the location, and choose No Location. This edits your library copy, so every future share of that photo is location-free.
iPhone photos come with one extra wrinkle: they’re usually HEIC files, which many recipients can’t open. Converting them to JPG for sharing solves the compatibility problem and, done with a re-encoding converter, strips the metadata in the same pass — our HEIC to JPG on iPhone guide walks through it.
Remove metadata on Android
Android is the least uniform of the four, because each manufacturer skins its own gallery app. The common path is Google Photos, which works the same on nearly every device.
In Google Photos: open the photo and swipe up to see its details, including a location map when coordinates are present. In recent versions you can tap the edit (pencil) option next to the location and choose Remove location— generally available for photos your own device captured. Google Photos also has a sharing setting that hides location data from photos shared via link, worth switching on once and forgetting.
In manufacturer gallery apps— Samsung Gallery and the like — the details screen usually offers an edit option that can clear location too, though the exact menu wording varies by brand and software version. If you can’t find it, don’t fight the gallery: the converter method below works identically on any Android phone’s browser.
As on iPhone, the built-in options centre on location. The rest of the EXIF block — device, settings, timestamps — generally stays unless you rebuild the file.
The conversion route: strip everything, on any device
Here’s the method that covers every platform and every field at once. When a converter rebuilds an image from its decoded pixels — the way browser-based tools re-encode through a canvas — the output file contains exactly what the encoder wrote: pixels, dimensions, format headers. The EXIF, IPTC, and XMP blocks from the source simply have nowhere to come from. It’s not that the metadata is deleted; the new file never had it.
FormatDrop works this way, entirely in your browser:
- Open the image converter (or the JPG converter if JPG is your target). Nothing installs and your photos never upload — the processing runs on your own device.
- Drop in one photo or a whole batch.
- Pick an output format. Converting JPG to JPG is fine — the re-encode is what strips the data, not the format change. (And yes, JPG and JPEG are the same thing — see JPG vs JPEG if you’ve ever wondered.)
- Download the converted copies and share those. Keep the originals for yourself — they still hold the capture details you might want later.
Two honest caveats so you know exactly what you’re trading. First, this behaviour is tool-dependent, not universal: some desktop converters and photo editors deliberately copy metadata into the output, because photographers often want it kept. If you use a different tool, check its output once — open the converted file’s properties and confirm the location and camera fields are gone. Second, re-encoding a lossy format like JPG re-runs its compression. At sensible quality settings you won’t see a difference, and the file usually gets smaller in the bargain — the same mechanics covered in our guide to compressing images without losing quality — but purists should strip in place or export to a lossless format instead.
Cheat-sheet: built-in options compared
Every platform gives you something — but they don’t all remove the same things.