You take a photo of a document, save it, and share it online thinking you have only shared an image. In reality, you may have just handed over your exact home coordinates, the serial number of your camera, your username, and your software license key.
What is File Metadata?
Metadata is 'data about data.' While you see the visual pixels of an image or the text inside a PDF, operating systems and cameras embed dozens of hidden tags inside the file container:
- EXIF (Exchangeable Image File Format): Embedded by smartphone cameras, including GPS latitude and longitude, altitude, timestamp down to the millisecond, lens focal length, and device IMEI.
- Document Revision Streams: Microsoft Word and Adobe Acrobat files frequently store author names, company intranet domains, file system directories (e.g.
C:\Users\JohnDoe\Documents\SecretProject), and previous deleted revisions. - Audio/Video ID3 Tags: Recorded voice memos and screen captures often log workstation hostnames, OS version numbers, and editing software build numbers.
Famous Real-World Disasters Caused by Metadata
History is replete with high-profile individuals undone by metadata negligence:
'In 2012, a high-profile tech entrepreneur on the run in Central America had his location exposed within minutes after a news outlet published an iPhone photo of him that inadvertently preserved intact GPS EXIF coordinates.'
Similar incidents happen daily in corporate negotiations: companies sending draft contracts as PDF or DOCX files accidentally expose internal pricing margins and redlines because previous drafts were hidden inside the file structure.
How to Protect Yourself Before Sending Any File
Before sharing files with strangers, clients, or uploading to public forums, follow this privacy hygiene checklist:
- Strip EXIF on Mobile: On iOS and Android, toggle off 'Location Services' for the Camera app, or use share options that explicitly strip location info.
- Use Clean PDF Exporters: Instead of saving Word documents with editing history, export as flattened PDF without document properties.
- Prefer Ephemeral Transmission Channels: When you transfer files using ephemeral platforms like Sendly, files are not publicly indexed by web crawlers or cached in search engine spiders.
- Audit with Metadata Viewers: Use browser-based metadata inspection tools to inspect what third parties see before clicking send.