How to Check If a Photo Contains Hidden Metadata: EXIF, GPS, IPTC, XMP

Quick answer

To check if a photo contains hidden metadata, inspect the exact file you plan to share, not just the copy in your photo library. On iPhone, open the photo in Photos and swipe up or tap the Info button. On Mac, open it in Preview and use Tools > Show Inspector. On Windows, right-click the file, choose Properties, and open the Details tab. For a privacy check without uploading the file, drop it into a browser-based EXIF reader such as PhotoTools Remove EXIF.

The fields to look for first are GPSLatitude, GPSLongitude, GPSAltitude, DateTimeOriginal, Make, Model, Software, Orientation, and any creator, caption, keyword, copyright, or location fields added by editing software. If GPS coordinates are present, treat the photo as location-sensitive. If only camera settings are present, the risk is usually lower, but still depends on the context.

A good metadata check has 3 passes:

1. Check the metadata fields.
2. Check the visible pixels for private details.
3. Clean a copy and re-check the cleaned file before sharing.

That last step is the one people skip. They clean one file, then accidentally send the original from Photos, iCloud, Google Photos, email, or a chat app.

What hidden photo metadata can include

Photo metadata is data stored in or alongside the image file. It does not appear in the picture itself, but software can read it. A normal phone photo can contain several kinds of metadata:

EXIF is the word most people know, but it is only one slice of photo metadata. IPTC metadata is common in news, stock, and publishing workflows. XMP is widely used by Adobe and other creative tools to embed labels, descriptions, rights, and workflow data. A privacy check should look beyond the word "EXIF" and ask a simpler question: what does this file reveal?

A realistic example

A photo from a phone might show a coffee cup. The file can still say:

One field alone is not always dangerous. Together, fields tell a story: where the photo was taken, when it was taken, what device captured it, and what workflow touched it afterward.

The privacy triage table

Use this table when you are deciding whether to clean a file before sharing.

The key is context. A GPS tag on a public landmark photo may not matter. A GPS tag on a photo taken in your living room matters a lot.

Where to check metadata, by platform

If you only need to know "does this photo leak GPS?", the built-in tools or PhotoTools are enough. If you need to inspect every possible tag before legal, journalistic, archival, or client delivery work, use ExifTool or another dedicated desktop metadata tool.

Checking metadata on iPhone

Apple's Photos app can show saved photo and video metadata. Open the photo, swipe up, or tap the Info button. Depending on the file, you can see the device that captured it, the date and time, camera settings, file size, and location on a map.

For a quick privacy check:

1. Open the photo in Photos.
2. Swipe up or tap the Info button.
3. Look for a map, location name, date/time, camera model, and file details.
4. If location is present, decide whether that place is safe to share.
5. If you share from the iOS share sheet, tap Options and turn off Location for that one share.

Two caveats matter. First, the share-sheet Location toggle applies to that sharing action; it does not clean the original file in your library. Second, not every upload path uses the share sheet. A web upload form, cloud file picker, or document attachment may send the original file.

Checking metadata on Mac

On macOS, Preview is the fastest built-in viewer.

1. Open the photo in Preview.
2. Choose Tools > Show Inspector, or press Cmd+I.
3. Open the More Info panel.
4. Check the EXIF, GPS, TIFF, and General tabs if they appear.

You can also right-click the file in Finder, choose Get Info, and expand More Info. Finder is useful for a quick look, but Preview usually shows more detail.

If you use the Photos app on Mac, open the image and use the info panel to check date, location, camera, and file information. As with iPhone, this is a readable summary, not a complete metadata dump.

Checking metadata on Windows

On Windows, right-click the image file, choose Properties, and open the Details tab. Look for camera make/model, date taken, dimensions, and GPS fields. If GPS is present, Windows may show latitude and longitude under a GPS section.

The Windows Details tab is useful but partial. It may not show MakerNotes, XMP, IPTC, embedded thumbnails, or metadata in less common formats. If the file is sensitive and the Details tab looks empty, do not assume the file is fully clean. Re-check with a dedicated metadata reader.

Checking metadata in a browser with PhotoTools

PhotoTools is useful when you want a local privacy check without uploading an identity photo, family photo, client image, or product photo to a server.

The workflow:

1. Open Remove EXIF.
2. Drop in the exact file you plan to share.
3. Review the fields shown on the file card.
4. Pay special attention to GPSLatitude, GPSLongitude, GPSAltitude, DateTimeOriginal, Make, Model, Software, Orientation, exposure, ISO, focal length, flash, and color-space fields.
5. If GPS is present, PhotoTools flags it as a privacy warning.
6. Click Strip & Download to export a clean copy.
7. Clear the tool, then drop the clean copy back in.
8. Confirm the sensitive fields are gone before uploading or sending.

PhotoTools currently focuses on common EXIF/GPS privacy fields rather than every possible metadata tag in a file. The clean export is created by drawing the image pixels to a fresh browser canvas and saving a new JPG or PNG, which drops the old metadata wrapper. That is enough for everyday sharing. For full forensic inspection of all metadata groups, use ExifTool.

JPG/JPEG and PNG are the safest formats for this workflow. HEIC files may inspect correctly in browsers that expose them as image files, but browser support varies. If a HEIC file does not load, export a JPG copy from Photos first, then inspect and clean that copy.

Checking metadata with ExifTool

If you are comfortable with the command line, ExifTool is the most complete way to inspect image metadata.

Use:

exiftool -a -G1 -s photo.jpg

What the flags do:

• -a shows duplicate tags instead of hiding them.
• -G1 shows the metadata group, such as EXIF, GPS, XMP, IPTC, or MakerNotes.
• -s prints short tag names that are easier to scan.

This is useful when a built-in viewer says nothing, but you still want to check IPTC, XMP, thumbnails, maker notes, or editing history. It is also useful for comparing the original and cleaned file side by side.

What to look for first

When you open a metadata viewer, do not try to read every technical field from top to bottom. Start with the fields that change the sharing decision.

GPS fields

Look for:

• GPSLatitude
• GPSLongitude
• latitude
• longitude
• GPSAltitude
• GPSTimeStamp
• GPSImgDirection

Latitude and longitude are the big ones. Paste them into a map and they can point to the capture location. Altitude, direction, and GPS time add context.

Time fields

Look for:

• DateTimeOriginal
• CreateDate
• DateTimeDigitized
• OffsetTimeOriginal
• SubSecTimeOriginal

Capture time can reveal routines. A batch of photos can show when someone leaves home, arrives at work, visits a school, or travels.

Device and software fields

Look for:

• Make
• Model
• LensModel
• Software
• ProcessingSoftware

These are usually lower risk than GPS, but they can identify the device or app used. For anonymous posting, public whistleblowing, sensitive client work, or marketplace listings, strip them.

IPTC and XMP fields

Look for:

• Creator
• Copyright
• Credit
• Caption
• Description
• Keywords
• Location
• City
• Country
• Source
• CreatorTool

These fields are not always bad. Photographers may intentionally keep copyright and creator fields. The risk is accidental context: client names, internal project codes, unreleased product labels, or location words you did not mean to publish.

What to do after you find metadata

If the photo is only going into your personal archive, you may want to keep metadata. EXIF helps with search, photo organization, camera settings, and memory. Do not remove it from your only original unless you mean to.

If the photo is leaving your control, make a clean copy:

1. Keep the original in your private archive.
2. Strip metadata from a copy.
3. Rename the copy if the filename exposes context.
4. Re-check the clean copy.
5. Upload or send only the clean copy.

For iPhone one-off sharing, Apple's share sheet can turn off Location before sharing. That is convenient, but it is not the same as creating a reusable clean file. For email, forums, cloud links, bug reports, marketplace listings, client uploads, and original-quality chat attachments, clean the file yourself before it leaves the device.

When "no metadata found" is not enough

A metadata reader can only tell you what it can read from that file. A clean result is good news, but it is not the whole privacy review.

Check these too:

• The visible image: faces, documents, mail, license plates, whiteboards, screens, browser tabs, map pins, reflections, school names, and street signs.
• The filename: client-launch-bedroom-final.jpg says a lot even with no EXIF.
• The exact file: a cloud service may export a new copy with different metadata.
• Live Photos and videos: cleaning the still image does not clean the paired video.
• Sidecar files: raw workflows may store metadata in .xmp sidecars.
• Platform data: a social app may remove public EXIF but still receive the original upload and collect its own location or account data.
• Manual location tags: a caption, check-in, album title, or map sticker can reveal location even after GPS is stripped.

This is why the best habit is simple: inspect, clean, re-check, then share.

Official and technical sources checked

• Apple Support: See photo and video information on iPhone
• Apple Support: Manage location metadata in Photos
• IPTC Photo Metadata Standard
• Adobe XMP overview
• ExifTool by Phil Harvey
• exifr JavaScript metadata parser