Most smartphone cameras record the exact latitude and longitude of every photo you take, down to about six decimal places — precise enough to pinpoint a spot within roughly 10cm. That data rides along inside the file as EXIF metadata, invisible in the image itself but readable by anyone who knows where to look. Before you post a photo of your new apartment, your car, your kids, or anything you'd rather not have geotagged publicly, it's worth thirty seconds to check what's actually in the file.
Where the GPS data actually lives
Camera GPS coordinates sit inside the EXIF (Exchangeable Image File Format) block of a JPEG, HEIC, or TIFF file — a small header section separate from the pixel data. Alongside GPS, the same block usually holds the camera or phone model, the exact timestamp down to the second, sometimes the lens and exposure settings, and occasionally a device serial number. None of this is visible when you view the photo. You need to actively inspect the file, or use a tool that reads the header, to see it.
Checking it yourself: no app required
On iPhone
Open the photo in the Photos app, swipe up (or tap the "i" info button on older iOS versions), and if location data is present you'll see a small map thumbnail with the approximate location pin. If there's no map shown, either location services were off when you took the photo, or the photo has already passed through an app that strips it (more on that below).
On Android
Open the photo in Google Photos, tap the info icon (usually an "i" in a circle, or accessible from the three-dot menu), and scroll down — if GPS data exists, you'll see a small embedded map with the location marked, plus the coordinates in the details panel.
On desktop
Windows: right-click the file, Properties, then the Details tab — GPS latitude/longitude appear near the bottom if present. macOS Finder's "Get Info" panel does not show GPS data, but opening the photo in Preview and using Tools > Show Inspector > the (i) tab will show it if it exists. Both approaches only show you the data — neither one removes it.
What happens when you share it: platform by platform
This is where people get caught out, because behavior is inconsistent and has changed over the years as platforms responded to privacy complaints. As of current, widely documented behavior:
- Facebook and Instagram: both strip GPS coordinates from photos before they're displayed publicly, and have done so for years following early privacy incidents. The original file with full metadata is typically retained on their servers under their data retention policy, even though the public-facing copy has GPS removed.
- X (formerly Twitter): strips EXIF metadata, including GPS, from uploaded images.
- WhatsApp: the default "send as photo" option compresses the image and strips most EXIF metadata including GPS in the process. But if you choose "send as document" instead, to preserve full quality, the original file — GPS data and all — goes through untouched. This is the single most common way people accidentally leak a location through WhatsApp, because "send as document" feels like the higher-quality, more careful option.
- Signal: strips metadata by default when sending as a standard image message.
- Email attachments, AirDrop, and cloud storage share links (Google Drive, Dropbox, iCloud): none of these strip metadata automatically. Whatever was in the file when you attached it is what the recipient receives.
The pattern worth remembering: convenience-oriented "share as photo" paths on social apps usually strip metadata as a side effect of compression, while anything that preserves full quality — documents, direct file transfer, cloud links, email — usually does not touch it.
Who actually needs to care about this
Realtors and property managers photographing homes for listings sometimes embed the exact address unintentionally through GPS tags, which is fine for a public listing but not for interior photos of an occupied home shared elsewhere. Freelancers and remote workers sending "here's my desk setup" photos can unintentionally reveal a home address. Domestic abuse safety guidance from multiple advocacy organizations specifically flags photo metadata as a location-tracking risk when a photo is shared with or by someone who shouldn't know the sender's location. Journalists and sources handling sensitive material have used metadata stripping as standard practice for over a decade for the same reason — a single leaked GPS tag has been enough to compromise a source's location in documented past cases.
The safe default: strip it before you share, not after
Checking each app's behavior individually is error-prone, especially since it changes over time and varies by exact settings (compression level, "keep original" toggles, etc.). The simpler and more reliable habit is to strip metadata before sharing rather than relying on the receiving platform to do it for you. ExifData.io's remover does this entirely in your browser — drop the file in, it shows you exactly what metadata is present (including GPS if it's there), and one click produces a clean copy with a SHA-256 hash so you can confirm nothing else changed. See the full breakdown of what EXIF data actually contains if you're working with PDFs or documents instead of photos — the same location and author-identifying risks apply to those formats too.