Can EXIF Data Track You? What Photos Reveal

Last updated · 6 min read

Quick answer

Not live. EXIF data cannot show where you are now. But an original photo can show where you were, when, and with which device, and anyone who gets the file can read it. The risk is real for photos taken at home or at work, and you can remove it before you share.

What EXIF data can show about you

  • Where: GPS coordinates of the camera, when location was on for the camera. Photos taken at home can show your home.
  • When: the date and time of each photo. Many photos from one place show a routine, such as when you are home or away.
  • With what: the phone or camera model, and on many cameras the serial number. This links photos to one device.
  • How you edited it: the software, and sometimes an edit history.

The photo does not send this data anywhere on its own. The risk starts when someone else holds the original file.

Real cases

Two cases are well documented. Neither is typical for most people, but they show how a photo file can give a place away.

  • 2012, a hacker case. Ars Technica reported in April 2012 on the case of Higinio Ochoa, who was linked to a hacking group. A photo posted online by the group held GPS data. Ars wrote that it showed the photo was taken with an iPhone 4 at a location in Australia, and that agents then searched Facebook and found details about people connected to Ochoa. Investigators also used other online traces, so the photo was one clue among several.
  • 2012, John McAfee. Wired reported in December 2012 that a photo published by Vice carried location data that pointed to a place in Guatemala. McAfee later said that he had altered the EXIF data on purpose, and Vice posted a new version of the photo without the GPS data. The facts of that case are disputed, so treat it as an example of how quickly people read this data, not as proof of a location.

What EXIF data cannot do

  • It cannot follow you. It stores one position per photo, at the moment of the shot.
  • It cannot name you. The author field is empty unless you or an app filled it in. A serial number links photos together, but it needs a link to your name from somewhere else, such as a warranty form or a sale.
  • It is often not there. Screenshots have no GPS data. Many sites remove metadata when you upload. A photo that you received through a chat app may have none.
  • It is not the only clue. A photo with no metadata can still show a street sign, a view or a face.

One more limit of removing metadata: researchers have shown since 2006 that the noise pattern of an image sensor can link photos to one camera, even with no metadata (Lukáš, Fridrich and Goljan, IEEE Transactions on Information Forensics and Security). That takes forensic software and several photos from the same camera. It is not a risk for most people. It does mean that no metadata is not the same as no trace.

Who is at risk most

Think about who might get your original file and what they would do with it. The common cases are:

  • Photos of your home, your children or your car that you send as files, post on small forums or add to a listing.
  • Photos for online marketplaces and dating profiles, where strangers see them.
  • Photos from a workplace, a protest or a place that you want to keep private.

How to share photos safely

  1. Turn off location for the camera. New photos then do not store GPS data. See the guides for iPhone and Android.
  2. Remove metadata before you share a file. Open WipePic, add the photos and select Remove Metadata. It removes the location, the date, the device model and serial numbers, the author, the edit history, AI labels and Content Credentials. It keeps the orientation and the color profile, and the pixels do not change. Your photos are not uploaded.
  3. Check the result. Open the clean file in the EXIF viewer. If no metadata is listed, it is clean.
  4. Look at the picture. Check the background for signs, house numbers and views before you post.

On an iPhone you can also turn off Location in Options of the share menu for one photo. That changes the copy that you share, and the original keeps its location.

Sources

Ars Technica, April 2012: Feds charge confessed Anon member after tracking his digital footprints. Wired, December 2012: Oops! Did Vice just give away John McAfee's location with photo metadata?. Both pages were read on November 8, 2026. Sensor noise: Lukáš, Fridrich and Goljan, Digital Camera Identification from Sensor Pattern Noise, 2006.

Questions

Can someone see where I am right now from a photo?

No. EXIF data is a record of where the camera was when you took the photo. It does not update and it does not send anything. Someone with an old photo knows where you were then.

Do I need to worry about photos that I post on social media?

Usually less than for files that you send. Many platforms remove metadata from the copy that other people see, but not all do, and the platform itself still receives the original. Read our guide on social media sites before you rely on it.

Does removing metadata make me anonymous?

No. It removes the hidden data in the file. It does not change what the picture shows, such as your face, your street or your car, and it does not hide your account or your IP address.

Is it risky to use my own photos in a sales listing?

It can be. If the photos hold GPS data, a buyer can read the place where you took them, and with a camera serial number they can tell that several listings come from the same device.

Remove the metadata from your photos

Free. In your browser. Your photos do not go to a server.

Clean a Photo