What your photo's metadata reveals about you

A photo straight from a phone or camera carries far more than the picture: the exact coordinates of where it was taken, the date and time to the second, the make and model of the device, and often the owner’s name, the software used to edit it, and a thumbnail of the version before it was cropped. Most of it is invisible in any viewer, but it is readable by anyone who receives the file. This post walks through what is in there, field by field, and how to see it on your own Mac.

Where you were, and when

The headline item is location. Phones and GPS-equipped cameras write latitude and longitude into the EXIF block of every photo, usually accurate to within a few meters. An iPhone adds altitude, the compass direction the camera was pointing, and sometimes the speed you were moving at.

One tagged photo reveals one place. A set of them reveals a pattern: the coordinates of your home are the ones that turn up in the most photos, the coordinates of your workplace are the ones from weekday mornings, and a child’s school is the spot that appears at 8:30 each morning. This is why location is the field that matters most for photos of children, of your home’s interior, or of anything you are selling online from your own address. We have a specific post on stripping location from listing photos.

EXIF stores the capture date and time, and modern phones add the time zone offset, so the time is unambiguous. There are usually three timestamps: when the photo was taken, when it was digitized (the same, for a phone) and when it was last modified.

On its own, a time is harmless. Combined with a location it tells someone when you are at a particular place, and combined with a set of photos it outlines a routine. It can also contradict a story: a photo captioned “this morning” with a timestamp from three years ago is a fact someone can check.

Screenshots carry a creation time too, taken from the Mac’s clock, but no location.

What you shot it with

The EXIF Make and Model tags record the device: “Apple, iPhone 15 Pro”, or a camera body name. Lens tags record the lens. Exposure tags record shutter speed, aperture, ISO, flash, focal length and the shooting mode.

For most people this is harmless and even useful. Two things in this category are less harmless:

• Serial numbers. Many interchangeable-lens cameras write the body serial number, and some write the lens serial number, into the file. Every photo from that camera shares the number, which links photos across accounts and platforms that otherwise look unconnected.
• Unique image identifiers. Some devices and editing apps write a unique ID per image or per original, which ties an edited version to its source even after cropping.

Who you are and what you did to the picture

Beyond EXIF, two other blocks travel inside the file.

IPTC fields were designed for news agencies. They hold a caption, keywords, a byline, a copyright notice and contact details. Cameras let you set an Artist and Copyright field once, and then every photo carries your name. The Photos app on the Mac writes titles, captions and keywords you type into exported files unless you uncheck the box.

XMP is the block editing software uses. It can carry a history of the edits applied, the name of the application, the original file name before you renamed it, and in some cases the name registered to the software license. A raw file’s XMP sidecar, or the XMP inside a JPEG exported from a raw editor, can describe the crop you applied, which means the part you cropped out is described even if it is not shown.

Then there is the embedded thumbnail. Cameras and many editors store a reduced-size preview inside the file. Some older workflows update the main image when you crop or censor part of it and leave the preview alone, so the preview still shows what you removed. Modern phone and Mac software generally regenerates the preview, but it is worth checking on an older file before you rely on a crop to hide something.

What the picture itself gives away

None of the above is in the pixels, and cleaning the file does nothing about what the pixels show. A reflection in a window or a pair of sunglasses, a street sign, a house number, the view from a balcony, a boarding pass on a table, a label on a medicine bottle, a license plate, or a monitor with an email open: these are the things that actually place and identify people in photos, far more often than EXIF does. If a photo matters for privacy, look at the frame as a stranger would before you look at the metadata. How to anonymize a screenshot or photo covers blurring and cropping.

Who strips it and who does not

Most large social platforms remove the bulk of the metadata from the copies they display, because serving it would be a liability for them. That is not the same as you never having handed it over, and not every field is removed on every platform.

Channels that send the file rather than a re-encoded copy generally keep everything: email attachments, AirDrop, cloud drive links, shared folders, and files sent through most desktop messaging apps. Messaging apps that compress photos on the phone often strip metadata as a side effect, but that varies by app and by whether you chose to send as a document. We go through the common channels in does AirDrop, iMessage or email strip photo metadata. The safe assumption is that a file you share is a file with its metadata intact.

How to look for yourself, and how to clean it

Seeing your own metadata is the quickest way to decide what you care about.

1. Open a photo in Preview and press Command-I to show the inspector.
2. Click the More Info tab. Each block appears as its own tab: General, EXIF, TIFF (which holds the make and model), GPS if there is a location, and IPTC or XMP if present.
3. In Terminal, mdls followed by the file path lists what Spotlight has indexed, including latitude and longitude and the device.

To remove it, you have several options depending on how much you want gone. Preview’s GPS tab has a Remove Location Info button for the coordinates alone. For everything at once across a folder of photos, Manatee’s Clean mode strips the GPS and camera EXIF and writes a cleaned copy of each file alongside the original, leaving the original untouched; it runs entirely on the Mac with no upload. It does not alter the picture, so the reflections and street signs are still your job. For step-by-step instructions, see how to strip EXIF data from photos on a Mac.

Questions

Do HEIC photos carry the same metadata as JPEGs?

Yes. HEIC stores EXIF, GPS and XMP in the same way, and converting a HEIC to JPEG on a Mac normally carries all of it across. If you convert and want it gone, clean the result.

Can someone tell which iPhone I have from a photo?

From a file with intact EXIF, yes: the model is in the TIFF block and the software version in the EXIF block. From a platform that strips metadata, no, though the picture’s dimensions and characteristics can hint at it.

Does editing a photo in the Photos app remove the original’s metadata?

No. Edits are stored as instructions, and an export carries the original capture data (location, date, device) unless you uncheck Location Information and the other boxes in the export sheet.

Is there metadata in a photo someone sent me that reveals things about them?

The same fields apply in reverse. If a friend emails you a photo from their phone, you can see where and when it was taken in Preview’s inspector. That is worth keeping in mind before forwarding it on.