The photo remembers where you stood.
Every photo from a phone carries a hidden layer: coordinates and a timestamp, device details too. One famous fugitive was located by a single published picture. Here is how image metadata works and when it travels with the file.
The McAfee photo
In December 2012, the software entrepreneur John McAfee was on the run and wanted for questioning in Belize. Vice sent journalists to travel with him and published a triumphant post titled, in effect, we are with him right now. The photo in the post came straight off an iPhone, with its metadata intact. Within hours a security researcher read the embedded GPS coordinates and placed McAfee at a specific resort in Guatemala, down to the poolside. He first claimed the data had been faked, then admitted it, then sought asylum, then was arrested for entering the country illegally.
One of the most famous names in computer security was located by a JPEG.
What lives inside an image file
Photos carry EXIF metadata: a block of information the camera writes into the file itself. On a phone with location services on, that block typically includes precise GPS coordinates, the exact date and time, the device make and model, and camera settings. None of it is visible in the picture. All of it travels when the file does.
The image shows what the camera saw. The metadata shows where the camera stood and when, and in whose hand.
When it leaks and when it does not
The major social platforms strip EXIF data from public posts on upload, which is why casual social sharing rarely leaks coordinates this way. The original file is the danger. Photos sent as email attachments, shared through many messaging apps as documents or originals, posted to personal websites, listed with items for sale, or handed over in a cloud folder often keep their full metadata. And metadata is only half the problem: the background of the image itself, the storefront, the street sign, the view from the window, gives away location to anyone willing to look, with no hidden data required.
What this means for you
Two settings and one habit close most of the gap. Turn off location tagging in your camera app so coordinates never enter the file. Use your phone's built-in option to remove location data when sharing a photo that already has it. And before an image leaves your hands for a public destination, look at the frame the way a stranger would: the data in the pixels has no setting to disable.
A full photo metadata guide is in development. The Phone Hardening Checklist covers the camera and location settings today.
Sources
No list to join. The work just ships.
PDN keeps no mailing list, which is exactly how a privacy project should treat your inbox. New guides and Atlas entries land on this site first, dossiers too, and the podcast carries every announcement. A community space is planned once the audience earns it.