YOUR PHOTOS know exactly where you were.
exiftool IMG_4471.jpg | grep -i gpsthe photo that snitches on you
you take a picture of your new couch, post it, and move on with your life. cool couch. bad news: that file might be carrying your exact gps coordinates along for the ride, tucked into metadata nobody bothers to look at. your phone's camera does this automatically, every time, unless you told it not to.
what's actually hiding in there
every photo your phone takes can be saved as more than just pixels. it's wrapped in a format called exif, which stands for exchangeable image file format. exif stores stuff like your camera model, the date and time you took the shot, the settings used, and if location services were on, the precise latitude and longitude of where you were standing. it's genuinely useful for photographers organizing their libraries. it's also a gift-wrapped address for anyone who knows how to look.
you can check any photo on your own machine with a tool called exiftool. it's free, it's open source, and it reads metadata without changing anything.
exiftool IMG_4471.jpg | grep -i gpsbreaking down that command
exiftool IMG_4471.jpg tells exiftool to open that specific image and dump every scrap of metadata it can find, camera make, lens info, timestamps, software used, all of it. that output can be long, sometimes over a hundred lines for one photo.
| grep -i gps is the filter. the pipe character takes all that output and hands it to grep, which searches line by line for a keyword. the -i flag makes it case-insensitive, so it catches "GPS", "gps", "Gps", whatever. if your phone tagged the photo with location data, you'll see fields like gps latitude, gps longitude, and gps position pop right out. if there's nothing there, grep just returns empty and you're clean on that front.
run this on a photo straight off your phone, before you've shared it anywhere, and you'll probably see it light up with coordinates. that's the moment it clicks for most people.
why this matters more than it seems
a single vacation photo probably isn't going to ruin your life. the real risk is patterns. someone scrapes metadata off a handful of your public photos and suddenly they know where you live, where your kid's school is, where you park your car, and what times you're usually out of the house. none of that required hacking anything. it's just data you handed over for free because your phone defaults to "share everything."
this is especially relevant if you sell things online, post real estate photos, run a small business account, or share photos of your home for any reason. that exif data rides along with the file even after you crop or filter the image in a lot of basic editing apps.
how to actually shut this down
the good news is this is one of the easier privacy leaks to fix, once you know it exists.
on iphone: go to settings, then privacy and security, then location services, then camera, and set it to never, or at least "while using" if you want it for personal organizing but plan to strip it before posting.
on android: open the camera app settings and look for location tags or geotagging and turn it off. exact menu wording varies by manufacturer but it's always in there somewhere.
for photos you've already taken and want to share safely, strip the metadata before uploading. you can do this with exiftool itself:
exiftool -gps:all= IMG_4471.jpgthat command wipes just the gps fields and leaves the rest of the metadata intact. if you want to nuke everything, use exiftool -all= IMG_4471.jpg instead. most social platforms strip exif automatically on upload, but don't count on that for photos you text, email, or post to your own website or listing site.
the takeaway
your camera isn't malicious, it's just chatty by default. the fix isn't paranoia, it's a thirty second settings change plus a habit of checking sensitive photos before they leave your phone. run exiftool on a few of your own images this week and see what they've been saying about you. odds are good you'll want to turn location tagging off right after.