Can Someone Track You From a Photo? (Yes — Here's How to Stop It)
The coordinates are already in the file. Here is who can read them, where it goes wrong, and the one-minute habit that closes the gap.
Yes. Can someone track you from a photo? In many cases they can, and it takes no skill at all. If location services were on when you pressed the shutter, your phone wrote GPS coordinates into the file — latitude and longitude accurate to within a few metres. Anyone who opens the original can paste those numbers into a map and stand where you stood.
Picture an illustrative case: someone lists a bike for sale and uploads a photo taken on their driveway. A buyer downloads the file, reads the embedded coordinates, and now knows the neighbourhood, the street, and roughly which house. No hacking, no clever trick — the seller simply never knew the data was there. (That example is illustrative: no real person and no real coordinates.)
On this page
What data is actually hiding in your photos
Every photo is two things: the picture you can see, and a block of notes your device wrote alongside it. That block is called EXIF, and it is filled in automatically at the moment of capture. The fields that matter most for tracking are these:
- GPS coordinates — latitude, longitude, often altitude. The single most revealing field, and accurate to a few metres.
- Date and time — the exact second the shutter fired, which places you somewhere at a known moment.
- Device model and serial number — make, model, and on many cameras a unique body serial that links separate photos to one owner.
- Lens and exposure settings — lens type, aperture, shutter speed, ISO, whether the flash fired.
- Software and author tags — the app that last saved the file, and sometimes a name typed into an editor years ago.
None of this is visible when you look at the picture. All of it travels with the file when you email it, attach it to a listing, or send it in a chat. For a field-by-field walkthrough of what each tag contains, see our guide to photo metadata.
Who can read this data
This is the part people get wrong. Reading EXIF is not a technical feat — it is a right-click on Windows, an Info panel on a phone, or a free web page. The realistic list of people who may end up holding your original file is short and ordinary:
- Buyers of second-hand items. They download your listing photos as a matter of course, and marketplace sites frequently pass the original file through unchanged.
- Strangers on dating apps. A photo sent directly in a chat is often the untouched original, not the compressed version a public feed would show.
- Scammers and data scrapers. Automated tools harvest public images in bulk and read their coordinates without a human ever looking.
- Anyone you send the original to. Email attachments, messaging apps in "send as file" mode, cloud links and AirDrop all tend to preserve metadata exactly.
3 real-world scenarios where this goes wrong
1. Selling something online
Marketplace photos are taken where the item is — which is usually your home. You photograph a sofa in the living room, a bike on the driveway, a phone on the kitchen table. The listing is deliberately public, shown to strangers, and often includes a line about collection. If those photos carry coordinates, the listing is quietly publishing your address to everyone who scrolls past, including people with no intention of buying.
2. Dating apps and meeting-point photos
Profile pictures are usually taken somewhere meaningful: your flat, your local café, the park at the end of your road. When a conversation moves into direct messages and photos are sent as files rather than through the feed, the metadata often survives. Someone you have not met yet may be able to work out not just your neighbourhood but your routine — which café, which time of day.
3. Photos of children
This is the one worth being blunt about. A first-day-of-school photo, a picture at the park, a shot in the back garden — posted together over a term, their coordinates and timestamps describe a routine: which school, which gate, what time, which house. Each photo on its own looks harmless. The pattern across a dozen of them is not.
How to check your own photos
Before changing anything, look. Checking takes seconds and tells you whether you have a problem at all — plenty of photos carry no GPS because location was off when they were taken.
- Pick a photo you have actually shared. A listing picture, a profile photo, something you sent as an attachment. Use the original file from your camera roll, not a screenshot of it.
- Open it in a metadata viewer. You can use the Info panel on a phone or Properties on Windows, though both hide fields. A full reader shows the entire record in one place.
- Look for a GPS group. If latitude and longitude appear, the photo is geotagged. If the group is missing entirely, there is no readable location in that file.
- Check the other fields while you are there. Device serial, capture time and author tags are worth knowing about even when there are no coordinates.
How to remove metadata before sharing
Once you know what is there, clearing it is quick. The routine is the same every time: check, remove, verify.
- Check. Read the file first so you know what you are removing. It also tells you whether the coordinates were there at all.
- Remove. Run the photo through a metadata remover. The cleaned copy is rebuilt from the raw pixels, so the EXIF block is not blanked out — it does not exist in the new file.
- Verify. Open the cleaned copy in the viewer again. The GPS group should be gone entirely. Never assume; the check takes five seconds and is the only way to be sure.
Two habits make this nearly automatic. Turn off location tagging in your camera app so new photos are clean from the start, and keep your untouched originals on your own device while sharing only cleaned copies.
Frequently Asked Questions
If the original file still carries its GPS tag, then yes — the coordinates can be pasted into any map and will land within a few metres of where the shutter fired. Whether that happens depends on how the photo reached them: most large social networks strip the tag from the public copy, but a file sent by email, messaging attachment or marketplace upload often arrives untouched. Assume the original is readable unless you cleaned it yourself.
They usually strip most EXIF, including GPS, from the version other users can download. That is genuinely helpful but it is not the whole story. Your original upload still reached their servers with the coordinates intact, behaviour differs between platforms and changes without notice, and the same photo forwarded through a chat app or sent as an email attachment may keep everything. Cleaning the file before you upload removes the question entirely.
Barely, and often not at all. PNG output is lossless, so there is no change whatsoever. JPG and WebP are re-encoded when the clean copy is written, which is a very small quality change saved at a high setting and not normally visible. If you want a perfect archive, keep your untouched original on your own device and share the cleaned copy.
So, can someone track you from a photo?
The honest answer is that it depends entirely on one thing you control: whether the file still carries its coordinates when it leaves your hands. Nobody needs to be skilled or determined to read them. They need the original file and ten seconds.
That is also why this is an easy problem to close. Check one photo you have already shared, see what is in it, and decide from evidence rather than worry. If the coordinates are there, strip them — and make it the habit you run before anything goes public.
Sources
- Camera & Imaging Products Association — Exchangeable image file format for digital still cameras (Exif)
- Office of the Privacy Commissioner of Canada — Metadata and Privacy
- Global Investigative Journalism Network — How to Protect Yourself from Metadata
The selling example in the introduction is illustrative only: it describes no real person and uses no real coordinates. External links open in a new tab.