What metadata does an iPhone photo actually store?
Every photo your camera takes carries a second, invisible photo: a written record of the circumstances it was taken in. The technical name is EXIF, and it travels inside the image file itself.
Every photo your iPhone takes stores an EXIF record — the exact GPS coordinates, the device that took it, the lens, and the second it was captured — inside the image file itself.
Drop a photo into the tool above and you will see your own version of that record. Most people are surprised by two fields in particular: how precise the location is, and the fact that the camera’s serial number is in there.
Broadly, the record breaks into four kinds of information:
Where. Latitude and longitude, usually accurate enough to identify a specific building rather than a neighbourhood, plus altitude and sometimes the compass direction the camera was pointing.
What took it. Manufacturer, model, operating system version, lens, and on many cameras a body serial number that belongs to one physical device and nothing else.
When. Date and time to the second, and on newer files the time zone offset, which quietly reveals what part of the world you were in even when GPS is switched off.
How. Shutter speed, aperture, ISO, focal length, whether the flash fired. This part is harmless and genuinely useful — it’s the reason photographers care about EXIF at all.
Why this matters before you share a photo
None of this is sinister on its own. It becomes a problem the moment a photo travels further than you expected.
Selling something online
This is the classic case. You photograph an item in your living room and post it to a marketplace. The listing photo carries the coordinates of your living room. Anyone who downloads the original file gets your home address, expressed more precisely than most people would say it out loud.
Posting under a pseudonym
Anonymity survives right up until two photos share a camera serial number. That single field links accounts together, and it links them to a physical object that can be traced through a purchase record or a repair ticket. Location data gets the attention, but device identifiers are what actually break pseudonyms.
Sending photos to people you don’t know
Insurance claims, rental applications, repair quotes, listings for a room. In each case a stranger receives a photograph taken inside your home. The picture is the point; the coordinates attached to it are not.
What platforms do and don’t remove
Here is where people get caught out. Several large social platforms strip EXIF when you upload — they re-encode images at their own sizes anyway, and the metadata does not survive the process.
But plenty of ordinary paths preserve it completely:
- Email attachments — sent as-is
- Cloud storage links (Drive, Dropbox, iCloud) — the original file is what downloads
- Messaging apps sending “original quality” — the option that keeps quality keeps everything else too
- AirDrop and direct file copies — a byte-for-byte copy
- Files pulled straight off the phone by cable — untouched
The rule of thumb: anything that re-encodes your photo probably drops the metadata, and anything that delivers the original file keeps all of it. If you are not sure which one you are using, check the file rather than trusting the pipeline.
What is EXIF data?
EXIF stands for Exchangeable Image File Format. It is a standard from the mid-1990s for storing camera settings inside an image, and it has been carried forward into every format that came after, including HEIC.
You may also run into two neighbours. IPTC holds editorial information — captions, credits, keywords — and is used mostly by news and stock photography. XMP is Adobe’s more flexible successor, used to record edits and rights information. Consumer phone photos are overwhelmingly EXIF, which is what this tool reads.
Technically, EXIF inside a HEIC file is stored as a TIFF-structured block referenced by the container’s item table. That is a detail you never need to think about, but it explains why some general-purpose metadata tools handle JPEG perfectly and come up blank on HEIC — they were written for one layout and never taught the other. For background on the container itself, see our guide to what a HEIC file is.
What HEIC stores that JPG doesn’t
This is where Apple’s format differs from the JPEG most metadata tools were built around:
| JPG | HEIC | |
|---|---|---|
| Images per file | One | One or many |
| Burst sequences | Separate files | Can live in one container |
| Live Photo pairing | Not applicable | Identifier links the still to its .MOV |
| Depth / portrait data | No | Can carry a depth map as an auxiliary layer |
| Editing history | No | Can hold the original alongside the edit |
| EXIF layout | APP1 marker segment | TIFF block referenced by the item table |
Two of these have real privacy consequences. A Live Photo identifier is what pairs a still image with its video clip; two files carrying the same identifier are provably from the same capture. And a container holding several images means a photo you never meant to share can ride along inside a file you did.
The tool above reports how many images the container holds, so at minimum you know whether there is more in the file than the one picture you are looking at.
How to remove metadata from HEIC photos
There are three reasonable approaches, and the best one depends on what you are trying to achieve.
Use the tool on this page
Drop the photo in, check the summary, and download a clean copy. The metadata is removed because the image is re-encoded from raw pixels — the encoder is handed a grid of colours with no record attached, so there is nothing for it to write out. Nothing is uploaded.
The trade-off is honest and worth repeating: the clean copy comes back as a JPG or PNG, not a HEIC. Browsers can decode HEIC but cannot write it, so no browser-based tool can hand you a stripped .heic file. Anything claiming otherwise is either processing your photo on a server or converting it without saying so.
If you want to keep the file exactly as it is, there is now a second route: our dedicated tool can remove EXIF data from the photo without re-encoding it at all. It rewrites the container rather than the image, so a HEIC stays a HEIC and a JPG keeps its original compression untouched.
Turn off location at the source
On an iPhone, open Settings, go to Privacy & Security, then Location Services, and set Camera to Never. New photos are then taken without coordinates at all, which is better than removing them afterwards. When sharing an individual photo, the share sheet also has an Options control at the top where location can be excluded for that share only.
This handles the most sensitive field and leaves the rest — device, timestamps, camera settings — in place.
Strip properties in Windows
Right-click the file, choose Properties, open the Details tab, and click “Remove Properties and Personal Information”. It works, it’s built in, and it costs nothing. Support for HEIC specifically is patchy, and it will not tell you what it removed.
Which to choose
| This tool | iPhone setting | Windows properties | |
|---|---|---|---|
| Shows you what’s there first | Yes | No | Partially |
| Removes GPS | Yes | Yes (prevents it) | Yes |
| Removes device and serial | Yes | No | Some fields |
| Keeps the HEIC format | No — JPG or PNG | Yes | Yes |
| Needs an upload | No | No | No |
| Works in bulk | Yes, as a zip | Not applicable | Yes |
What “clean” does and doesn’t mean
Worth being precise, because privacy tools tend to overpromise.
A clean copy from this page has no EXIF block: no coordinates, no device, no serial number, no timestamps. That is the whole metadata record, not a selected subset.
What it does not claim to do is make a photo untraceable. The pixels themselves still carry information — what is visible in the frame, reflections, the view out of a window, a street sign in the background. Sensor-level noise patterns can in principle be matched to a specific camera by someone with the original device and the motivation to try. Removing metadata solves the metadata problem, which is the one that affects nearly everybody, and it does not pretend to solve forensic analysis.
If you want to look at your photos properly before deciding what to share, the HEIC viewer opens them full size in the same private, on-device way. When you are ready to convert a batch, HEIC to JPG handles the whole folder at once, and HEIC to PDF binds several photos into one document.