What Metadata Does Your iPhone Put in Every Photo?

iPhones are famously privacy-conscious devices — Apple's marketing has made "privacy" a household word. But every photo your iPhone takes still carries an extensive metadata dossier that most users have no idea exists. Some of it is legitimately useful. Some of it can be used to identify you, track you, and reconstruct your daily life. Here's exactly what your iPhone embeds in every image and what you can do about it.

The full field list

A typical iPhone photo (taken with default settings on iOS 17 or later) contains around 40 to 60 distinct metadata fields spread across the EXIF, XMP, and Apple-proprietary Maker Note blocks. The most notable:

Location fields

• GPS latitude and longitude — accurate to roughly 3-5 meters in open sky, worse indoors.
• GPS altitude — your elevation, which combined with GPS coordinates identifies specific floors of buildings.
• GPS timestamp — UTC time from the GPS satellites, independent of your phone's clock.
• Direction (compass heading) — which way your camera was pointed, from magnetic north.
• Speed — how fast you were moving when the photo was taken.
• Reference elevation — above/below sea level indicator.

Device fields

• Make — always "Apple".
• Model — exact iPhone model, e.g., "iPhone 15 Pro Max".
• Lens Model — which lens was used (main, ultra-wide, telephoto).
• iOS version — exact software build number.
• Camera app used — usually "Camera" but reveals if you used a third-party app.

Timing fields

• Date/Time Original — when the photo was captured, to the second.
• Sub-second precision — iPhones also record fractions of a second for high-precision timing.
• Time zone offset — which timezone you were in.
• Digitized time — separate from capture time; useful for detecting time-tampering.

Capture settings

• ISO, aperture (f-stop), shutter speed, focal length
• Whether flash fired, whether HDR was used, whether Live Photo was captured
• Focus point coordinates within the frame
• Exposure bias and metering mode

Apple-specific fields

In the Apple Maker Note block (a proprietary section within EXIF), iPhones embed additional data including:

• Whether Portrait mode was used and the aperture setting for depth effect
• Face detection data — whether faces were detected and roughly where in the frame (not the biometric fingerprint of the faces themselves, but their presence and position)
• Scene classification tags (indoor, outdoor, sunset, animal, food, etc.)
• Live Photo association — links the still image to its accompanying video clip
• Depth data from the LiDAR sensor on Pro models

Why iPhones embed all this

Most of these fields exist for legitimate feature support:

• GPS enables the Places feature in Photos, which auto-organizes your photos by location.
• Face detection metadata enables People albums and search.
• Depth data enables Portrait mode editing and background changes.
• Live Photo association enables the video-plus-still hybrid to work as one unit.
• Scene classification enables Photos search ("show me photos of sunsets") and Memories.

Apple designed iPhones so that most of these features are computed on-device and stay on-device. That's good for your privacy relative to Google Photos or Facebook. But the moment you share a photo outside your iPhone — by email, iMessage, AirDrop, or file transfer — all of that metadata goes with it.

What travels when you share

This is where most people get burned. iOS does NOT automatically strip metadata when sharing. The metadata behavior depends on how you share:

The takeaway: iMessage, Mail, AirDrop, iCloud file shares, and encrypted messengers like Signal all preserve full metadata by default. If you send a photo through any of these, the recipient (or anyone who intercepts the file) gets your exact GPS coordinates, iPhone model, and everything else.

The built-in "Options" toggle you probably don't know about

iOS 15 and later has a built-in option to strip location data at share time. It's the least-known privacy feature in iOS and one of the most useful:

1. Open Photos and select a photo
2. Tap the Share button (square with up arrow)
3. At the top of the share sheet, tap "Options" (below the photo thumbnail)
4. Toggle "Location" to Off
5. Optionally toggle "All Photos Data" off to strip more than just location
6. Tap Done, then choose how to share

Important: this only affects the current share. You have to do it every single time. The setting doesn't stick, and there's no way to make "Location: Off" the default for all shares.

Prevent metadata from being embedded in the first place

If you'd rather not embed GPS in any photo at all:

1. Settings → Privacy & Security → Location Services
2. Scroll to Camera
3. Set to "Never"

This prevents future photos from getting GPS coordinates. It does not affect photos you've already taken — those still contain GPS. Also note: this disables the Places feature in Photos and geolocation-based organization.

A middle-ground option: set to "Ask Next Time or When I Share" and enable location only when you actively want to remember where a photo was taken.

Cleaning photos you've already taken

The built-in iOS options don't retroactively clean existing photos. For photos already in your library that you want to share safely, use FileScrub's GPS Remover or Universal Scrubber from Safari on your iPhone — both run entirely in the browser, no upload, no account.

To use FileScrub from an iPhone:

1. Open Safari and go to filescrub.com/remove-gps
2. Tap the drop zone and choose "Photo Library"
3. Select your photo
4. Tap "Remove GPS Data"
5. Tap the download and choose "Save to Photos" or share directly

The whole flow takes about 15 seconds and the cleaned photo is visually identical to the original.

HEIC vs JPG considerations

Modern iPhones save photos as HEIC (High Efficiency Image Container) by default, not JPG. HEIC files carry the same EXIF/XMP metadata that JPGs do, but many older tools and websites don't support HEIC directly. If you're sharing to a service that requires JPG, iOS auto-converts — and the conversion preserves metadata.

To force JPG capture instead of HEIC: Settings → Camera → Formats → "Most Compatible" (instead of "High Efficiency"). This produces larger files but ensures maximum compatibility. Metadata behavior is identical either way.

The bottom line

Your iPhone is one of the most metadata-rich cameras ever made. Every photo you take contains 40+ fields describing where you were, what device you used, exactly when, and increasingly, what the photo depicts. Apple keeps most of that data on-device — but the moment you share outside of iOS, the metadata rides along and can be trivially extracted by the recipient.

The fix is easy: turn off Camera location if you don't need geotagged photos, use the built-in "Options → Location Off" toggle when sharing, and scrub existing photos through FileScrub before sending them to anyone via iMessage, Mail, AirDrop, or file share. Ten seconds of hygiene, unbounded reduction in leak surface.