Geotagging
What is geotagging?
Have you ever noticed that some photos or videos have location information attached to them? This is called geotagging, and it's a way to add geographical metadata to media files. Geotagging can be done manually by entering the location information into the file or device, or automatically using GPS technology. When it comes to media files, this metadata is often stored in something called EXIF data, which is a standard for storing metadata in image files. The EXIF data for a geotagged media file will usually include the latitude and longitude coordinates of the location where the media was taken and/or the device was used. Geotagging can be really useful for organizing and categorizing media by location.
How can geotagging be used against you?
Geotagging your photos or videos may seem like a harmless way to organize and remember your memories, but it could potentially reveal sensitive information about your location or activities to malicious actors. This information could be used to track your movements, invade your privacy, or even put you in danger. For example, if a malicious actor sees a photo that you've posted on social media from a location that you may not want to share publicly to random strangers (such as your house, kid's school, workplace, etc.) they could use that information to cause harm.
Typically, when it comes to social media, many platforms claim the EXIF data is scrapped before uploading, so if someone were to download an image you posted on Facebook, for example, they are not likely able to find the geographical metadata. However, be mindful that social platforms usually allow a user to add geographical data or even tagging a location such as a coffee shop. This small act can give away so much information as to where you are, your routines (maybe you like to stop by your local coffee shop every morning before going into work and post an image of that cute matcha latte), who you are with, etc. A malicious actor can use this information to build a profile on you to learn more about your location, people you associate with, what you do for work, where you work, where you live, and the list goes on.
Do you have a blog or a site?
Any photos you post on your own blog or site likely contains the EXIF data and malicious actors could easily save those images and use photo location websites, such as www.pic2map.com, to find the device information and where those photos were taken. This is exactly what happened when a reporter from VICE news uploaded a photo of himself and John McAfee giving away their whereabouts back in 2012. Since then the photo was taken down from the article, however, the original photo has made its way around the internet. Here's an example below of that very same photo that was originally uploaded to VICE's website:
Notice how the photo has data behind the image, such as the device being used, date, and location. If you zoom in close enough, you can see the satellite image of the area that photo was taken.
Do you send photos over email or text?
The same concept applies. Once you send a photo out to someone, you really don't know what will happen to that image anymore. It can easily be forwarded and passed along and could potentially get in a stranger's hands. If they were curious enough they could use the EXIF data from the photo and perform the same actions as mentioned above.
Have you ever tried selling something of yours like older furniture, clothes, or a bicycle that the kids just don't use anymore?
This happens all the time, right! You may have exchanged numbers with someone from Craigslist or Offerup and then via SMS you probably sent them additional images of that barely used bicycle you're trying to get rid of, because your kids are now off to college. Those pictures you took were definitely from your backyard. Now the complete stranger can use that EXIF data to find out where you live, politely decline your offer, and possibly come by at a later time to snatch that bike when you're least expecting it! The worst part is, you probably had no intentions of sharing your address and planned on meeting at a public location nearby away from your house.
This is that thief getting away!
Be aware of the risks and continue reading below to take steps to learn how to better protect yourself.
How can you protect yourself from geotagging?
Feeling paranoid? If you're like me and you're thinking what if there's a day where it's possible to retrieve the EXIF data from posts on social media? Well, the solution is as simple as uploading a screenshot of the image you're trying to post. And if you're thinking, "But that ruins the quality of my photo!" To be fair, no one will really be able to tell the pixel difference between the original photo and the screenshot.
Why do screenshots work?
Screenshots are typically saved as image files, but they are not typically captured using a device like a camera or smartphone. Instead, they are created by the operating system or a software program when a user takes a snapshot of their computer screen or phone. As a result, screenshots typically do not have EXIF data attached to them, as there is no device or camera that is capturing the image and adding the EXIF data to the file.
Still gotta use the original photos?
If you must still use the original photo and you just cannot compromise quality, you can find tools out there that remove the EXIF data. You can do that before uploading it to social media or even before sending pictures to people via SMS or email. You don't want grandma sending your family Christmas photos you took in your living room with her entire contact list on her phone. If she does that, those photos with your geographical metadata are attached and are out there being shared with who knows who, and then you'll be telling yourself, "I should have removed the metadata from those pictures before sending them to grandma!" Cut her some slack, it's not like she knew any better. But now you know better and can educate grandma too!
Don't want to use tools to remove EXIF data, but would rather do it yourself from your phone?
Here's how you can do it from your iPhone:
In the Photos app, navigate to the photo you want to adjust.
Now, either swipe up on the photo or tap the info (i) button to view the photo's information.
Next, tap Adjust on the bottom right corner of the map. This will show the exact address or location where the photo was taken.
Finally, tap No Location. You'll be redirected back to the photo's information, where the map will then disappear and the location metadata will be gone.
Here's how you can do it from your Android phone using Google Photos:
On your Android phone or tablet, open Google Photos.
Open the photo or video.
Tap More > Edit
Add or select a location from your recent locations.
To remove the estimated location, tap Remove location.
If from here on out you would prefer that the location data not be attached to the photos you take to begin with, you should have the option to disable the geotagging feature on your smartphone or camera. Many devices have this option, which prevents location information from being attached to media files or stored in the EXIF data of the device.
Lastly, check the privacy settings on your social media accounts to control who can see your posts and location information. Even if the geotagging feature is disabled on your device, be careful about sharing location information in other ways, such as on social media or online profiles. You may even want to consider the photo itself, such as street signs in the background, unique buildings, or even building numbers. By taking these steps, you can help protect your privacy online.