What your photographs are carrying
Every photograph from a phone or camera carries an EXIF block, and its contents are more revealing than most people expect. The routine fields are camera make and model, lens, focal length, aperture, shutter speed, ISO and the exact date and time to the second. Many cameras also record a serial number, which links every photograph a given body has ever taken.
The consequential field is GPS. Phones embed latitude and longitude by default, typically accurate to within a few metres, plus altitude and sometimes compass heading. A photograph taken at home and posted publicly discloses a home address to anyone who opens the file properties — no specialist tooling required.
Beyond EXIF there are other blocks: IPTC fields for copyright and captions, XMP data written by editing software, and a full editing history in some cases. Screenshots and edited exports can carry the name of the software, the account it was registered to, and occasionally the original file path, which may include a username.
Which platforms strip it and which do not
Major social networks generally strip EXIF from images they re-encode, and since they resize aggressively for delivery, most uploads are re-encoded. That is a side effect rather than a promise, and it protects the version other users download — the platform itself retains the original with metadata intact.
The gap is everywhere else. Files sent through email, most chat applications when "send as file" or "send as document" is chosen, cloud storage links, marketplace listings, forum attachments and images uploaded to your own website usually arrive with metadata untouched. Marketplace listings are the classic case: a photograph of an item for sale, taken at home, published with coordinates.
Because you cannot easily tell which path an image will take, stripping before sharing is the reliable habit. It costs nothing for images destined for the web, where none of the metadata is used.
What is worth keeping, and what removal does not fix
Metadata is not purely a liability. Copyright and creator fields matter to photographers, and orientation is functional rather than informational — remove it carelessly and images that relied on the rotation flag appear sideways. A colour profile also matters for wide-gamut images, since discarding it makes colours shift. Good practice is selective removal: drop GPS and device identifiers, keep orientation, colour profile and any copyright you want asserted.
It is equally important to know what stripping does not do. It does not change the image content, so a reflection in a window, a visible street sign, a house number or a distinctive view still identifies a location. It does not remove information encoded in the pixels themselves, such as a visible timestamp burned in by the camera.
Nor does it help if the original has already been shared, since the copy someone else holds is unaffected. Strip before the first upload, not after. Cropping alone does not remove metadata either — the two operations are independent, so run both if you need both.