What Is EXIF Data? How Your Photos Reveal More Than You Think

What Is EXIF Data?

EXIF stands for Exchangeable Image File Format. It is a standard for storing metadata inside digital image files — primarily JPEGs and TIFFs, though many other formats support it. Fujifilm developed the original standard in 1995, and the Japan Electronic Industries Development Association (JEIDA) formalized it. Today it is maintained by the Camera and Imaging Products Association (CIPA).

EXIF data is embedded directly in the image file, invisible to anyone just viewing the photo but readable by any software that knows to look. When you share an unmodified JPEG, you share all of its metadata too.

What EXIF Data Contains

A typical smartphone photo contains dozens of EXIF fields. The most significant include:

Location information

• GPS Latitude and Longitude: Where the photo was taken, typically accurate to within a few meters
• GPS Altitude: Elevation above sea level
• GPS Timestamp: The precise time according to GPS satellites, separate from the camera clock

Device information

• Make and Model: Camera manufacturer and model (e.g., "Apple iPhone 15 Pro")
• Software: The OS or firmware version that processed the image
• Lens model: On DSLRs and mirrorless cameras, the specific lens attached

Capture settings

• Focal length and equivalent focal length
• Aperture (f-number)
• Shutter speed (exposure time)
• ISO sensitivity
• Flash status
• White balance setting
• Orientation: Whether the camera was held portrait or landscape

Timestamps

• DateTimeOriginal: When the shutter was pressed
• DateTimeDigitized: When the image was digitized (usually the same)
• DateTime: When the file was last modified

How Precise Is GPS Location Data?

Modern smartphones achieve GPS accuracy of 3–5 meters under good sky conditions. The coordinates stored in a photo's EXIF data can reveal not just a city or neighbourhood, but a specific building, room, or spot within a room. This is precise enough to identify a home address, a workplace, a hotel room, or a safe house.

Real Privacy Incidents

The risks of EXIF metadata are not theoretical. In 2012, tech entrepreneur John McAfee — then a fugitive from Belizean police — granted an exclusive interview to journalists at Vice. One journalist photographed McAfee with an iPhone and published the image. The photo's EXIF data contained GPS coordinates pointing to Puerto Cortés, Guatemala, exposing his exact location. Guatemalan authorities arrested him shortly after.

Similar incidents have involved domestic abuse survivors, whistleblowers, journalists photographing sources, and activists in authoritarian countries — any situation where revealing physical location creates serious risk.

IPTC and XMP: Other Types of Image Metadata

EXIF is not the only metadata format embedded in images. IPTC metadata (International Press Telecommunications Council) is used by professional photographers to embed captions, copyright notices, and editorial keywords. XMP (Extensible Metadata Platform, developed by Adobe) stores editing history, colour profiles, ratings, and keywords from tools like Lightroom and Photoshop.

A single image can contain all three metadata formats simultaneously, with different tools reading and writing to each independently.

Which Platforms Strip EXIF Automatically?

Major social platforms strip most EXIF data when you upload photos. Facebook, Instagram, and Twitter/X remove GPS coordinates and device details before serving images publicly. However, this is not universal: direct file-sharing services, email attachments, messaging apps like iMessage (in some configurations), and cloud storage services that serve original files may preserve all metadata.

Do not assume a platform has removed metadata unless you have verified it. The safest approach is to strip metadata before sharing, not to rely on the recipient's platform doing it for you.