Most people assume that if a photo has no GPS latitude and longitude, it's location-safe. Removing those two numbers is a good start — but it isn't the whole story. An image's metadata can carry several other fields that narrow down where and when it was taken, and an ordinary "Save As" or a quick edit often leaves them untouched.
These aren't exotic spyware. They're standard parts of the EXIF format that your phone or camera fills in automatically. Each is small on its own; combined, they can rebuild a surprising amount of context.
Here are the location-relevant fields that most often survive:
GPSAltitude), a precise UTC timestamp, and sometimes the direction the camera was facing (GPSImgDirection). Deleting just lat/long can leave these behind.OffsetTimeOriginal) that records your offset from UTC, written like +05:30. That doesn't pinpoint a country, but it places you in a time-zone band — and with the timestamp, it tells an analyst roughly where in the world you were.Because these fields live in different parts of the file, deleting the visible coordinates in a photo app often isn't enough. A thorough strip rewrites the image without its metadata blocks entirely — the GPS block, the timestamps and offset, and the vendor maker notes.
EXIF B Gone does this in your browser: the image is processed locally as raw binary and re-saved with the metadata removed, so nothing is uploaded. The cleaned file carries only the pixels you meant to share.
← Back to Security Blog Insights