Privacy & Safety
Every photo you take on a smartphone carries an invisible passenger: your precise GPS location at the moment of shooting, embedded in the file itself. For most of us, most of the time, this is a useful feature rather than a risk — it's what lets our photo libraries organise by location, what lets tools like MyPhotoTrace show you where a photo was taken, and what lets your phone offer directions back to a restaurant you photographed six months ago.
But for travellers sharing photos online, the same metadata that reveals location to helpful tools can, in theory, reveal it to anyone who downloads those photos — including people you'd prefer didn't know where you were. Understanding exactly when this is a risk and when it isn't is more useful than blanket anxiety about photo metadata.
The GPS fields in EXIF metadata store precise latitude and longitude coordinates, accurate under good conditions to within 5–10 metres. Combined with the timestamp, a photo's metadata can tell anyone who reads it: this person was at precisely this location at precisely this time.
For most travel photography, that's not sensitive. A photo of the Colosseum taken at 2pm tells the world you were a tourist at a major landmark one afternoon — not useful to anyone with ill intent. The risk calculus changes in specific scenarios, which we'll address directly.
The good news is that most social media platforms remove GPS coordinates from photos during the upload process. This is primarily a privacy-protective behaviour, though it's worth understanding which platforms do it and which don't.
Instagram strips GPS data from all photos when they are uploaded to the platform. A photo downloaded from Instagram will not contain the original location coordinates. Instagram does allow you to add a location tag manually to a post, but this is separate from and coarser than the GPS coordinates in the original file.
Facebook removes GPS coordinates from photos uploaded to the platform. Some other EXIF data (camera model, date) may be retained in some circumstances, but location data is stripped.
WhatsApp strips virtually all EXIF metadata and also heavily compresses photos during transmission. A photo received via WhatsApp contains almost no original metadata and is typically a fraction of the original file size. This makes WhatsApp a very poor choice for sharing photos you want people to be able to use at full quality, but an excellent accidental privacy protector.
Twitter strips GPS coordinates from photos uploaded to the platform. Metadata stripping has been a feature of Twitter since 2012.
This is where it gets more nuanced. iMessage sent between Apple devices preserves EXIF metadata, including GPS coordinates, when photos are sent at full resolution. If you share a photo via iMessage to another iPhone user and they download the original file, they have access to the location data. If the photo is sent at a reduced size ("Reduced Size" option), some metadata may be affected.
Email attachments travel with their full metadata intact. A photo sent as an email attachment to anyone contains the original GPS coordinates, timestamp, and all other EXIF data. This is true regardless of which email client is used to send or receive.
iCloud Photos, when syncing between your own devices, preserves full metadata. A photo in your iCloud library on your iPhone has the same metadata as the original file. This is the expected and useful behaviour — iCloud is a backup and sync service for your own data. The risk is if you use iCloud Photo Sharing (shared albums) — photos shared via this feature retain their GPS data and are visible to everyone you share the album with.
Google Photos preserves metadata in stored originals when uploaded at original quality. Photos shared via Google Photos albums retain their metadata. If you share a Google Photos link, the recipient can download the original with full metadata intact.
Social media platforms (Instagram, Facebook, Twitter, TikTok) strip GPS data. Direct file sharing (email, AirDrop, iMessage, Google Photos links) preserves it. When in doubt, check using MyPhotoTrace — upload the photo and see if the Where field shows location data.
For most travellers photographing tourist sites, markets, and landscapes, GPS metadata in photos is not a meaningful safety risk. However, specific scenarios do warrant care.
A photo taken at home — or at a family member's home — that is shared directly via email or iMessage contains precise coordinates of that address. For most people this is low-risk; the concern rises if you're sharing photos with people you don't fully trust, or if you're posting to public platforms where the direct file (rather than the platform's stripped version) is accessible.
The combination of GPS coordinates and a recent timestamp can reveal where you are right now. If you email full-resolution photos immediately after taking them, the metadata reveals your precise current location. For the vast majority of travellers this is irrelevant, but people who have concerns about stalking or domestic safety situations should be aware of this possibility.
For journalists photographing in conflict zones or activists documenting sensitive situations, GPS metadata in photos can pose real risks if photos are shared with their original metadata intact. In these specific contexts, using a dedicated tool to strip EXIF data before sharing is essential practice.
Photos of children that contain GPS data and are shared via direct file transfer reveal the child's home or school location. When sharing family photos, sharing via platforms that strip metadata (Instagram, Facebook) or explicitly removing location data first is a reasonable precaution.
The simplest method is to upload the photo to MyPhotoTrace and check what appears in the Where field. If GPS coordinates are shown, the photo contains location data. If the Where section shows "no location data found," the GPS information is either absent or has already been stripped.
On iPhone, there is a built-in option when using AirDrop or the share sheet. When you tap Share on a photo in Photos app, before selecting a share destination, tap the Options button at the top of the share sheet. You'll see a toggle for Location — turning this off removes GPS data from the shared copy while keeping the original intact in your library.
On Mac, Photos app allows you to export photos with location data removed: File → Export → Export Photo, then uncheck Location Information before exporting.
On Android, some manufacturers include an option in the camera settings to disable location embedding entirely, and the Share menu on some devices includes an option to remove metadata before sharing.
For bulk removal or more control, desktop tools like ExifTool (free, command-line) and various consumer applications can remove GPS data from multiple files at once while preserving other metadata.
Location metadata in travel photos is predominantly useful, not dangerous. The GPS coordinates that tell you a photo was taken at a specific beach in Goa or a specific viewpoint in Patagonia are the same data that makes your photo library searchable, makes tools like MyPhotoTrace work, and helps you remember where your best shots were taken. For the overwhelming majority of travel photography shared on mainstream platforms, metadata stripping at the platform level means you don't need to think about this at all.
The scenarios where GPS metadata poses real risk are specific and known: photos of home addresses shared directly, real-time location disclosure in sensitive situations, and professional contexts like journalism or activism in high-risk environments. For these cases, the mitigations are clear. For everyone else, the useful thing to know is simply which channels preserve metadata and which strip it — so you're making informed choices rather than uninformed ones.