Android now stops you sharing your location in photos
129 points
1 hour ago
| 18 comments
| shkspr.mobi
| HN
ieie3366
1 hour ago
[-]
Most likely: actually using the geolocation is an extremely niche usecase for images uploaded from mobile browsers.

I’d wager 99.9% of the users didn’t realize that they are effectively sending their live GPS coords to a random website when taking a photo.

But yes, a prop to the input tag ’includeLocation’ which would then give the user some popup confirmation prompt would have been nice

reply
embedding-shape
1 hour ago
[-]
> I’d wager 99.9% of the users didn’t realize that they are effectively sending their live GPS coords to a random website when taking a photo.

I'd wager 90% of the photos on Google Maps associated with various listings don't actually know their photos are in public. I keep coming across selfies and other photos that look very personal, but somehow someone uploaded to Google Maps, the photo is next to a store or something and Google somehow linked them together, probably by EXIF.

reply
eru
59 minutes ago
[-]
Google prompts you in Google Maps if you want to upload your picture to Maps.

I sometimes do that for random pictures, even like selfies, which I don't mind popping up there.

reply
PokemonNoGo
43 minutes ago
[-]
Wait... You post selfies on Google Maps? The thought never crossed my mind. What would the purpose be? Sorry I'm probably thick...
reply
PepperdineG
27 minutes ago
[-]
I can say for me that after my father died I posted pictures of him at some of his favorite places or from favorite trips.
reply
petu
10 minutes ago
[-]
Google Maps app sees that you took photo near POI and later in the day asks you in notification if you want to share it on maps.

You review the photo and go "lol, sure".

At least for me that doesn't even feel like posting due to how frictionless it is and that it's about natural discoverability (someone has to click that POI and scroll through photos to find it).

reply
harvey9
20 minutes ago
[-]
I suspect there used to be a flow which was far too easy to share directly to Google maps. I was browsing the map once and found a picture of a credit card in a room in a hotel. I guess the guy intended to send it to his PA or something.
reply
kccqzy
45 minutes ago
[-]
I have friends that do that and it’s intentional. Had a good time at a store or restaurant? Take a selfie and upload to Google Maps. Also take a selfie video and upload to Instagram stories. It’s a way of life that defaults to more sharing.
reply
sixhobbits
1 hour ago
[-]
It's a sad story and a fun-looking project but I think Google 100% did the right thing here. Most people have no idea how much information is included in photo metadata, and stripping it as much as possible lines up to how people expect the world to work.
reply
maccard
54 minutes ago
[-]
If google really cared about privacy, they wouldn't have moved maps away from a subdomain. now if I want maps to have my location (logical), I need to grant google _search_ my location too.
reply
edgineer
26 minutes ago
[-]
It's not all-or-nothing; sometimes some people at Google push for some things to improve privacy. Rarely happens when revenue is at stake.

Android used to ask you "do you want to alllow internet access?" as an app permission. Google removed that, as it would stop ads from showing up. Devastating change for privacy and security, great for revenue.

reply
sathackr
7 minutes ago
[-]
GrapheneOS still does this -- allows controlling internet access on a per-app basis.
reply
lukan
39 seconds ago
[-]
For those of us stuck on normal android, is there a way to achieve that? I know it used to work with some firewall apps but nowdays they all require root access.
reply
amazingamazing
35 minutes ago
[-]
Google has your location either way. What difference does it make?
reply
kevin_thibedeau
15 minutes ago
[-]
You can lock down their usage. Limit it to three months storage and minimize sharing. They still report an old address for home and work for me since I dialed up the restrictions years ago. They have the data but it is less exposed.
reply
amazingamazing
5 minutes ago
[-]
I honestly don’t understand the scenario you’re defending against. Google still knows where you actually live and work trivially. If you don’t trust Google you should just de-Google completely.
reply
butlike
37 minutes ago
[-]
I'm not sure I follow. maps.google.com still resolves?
reply
maccard
36 minutes ago
[-]
maps.google.com now redirects to google.com/maps and has done for the past few years.
reply
flipped
42 minutes ago
[-]
Google pretends to care and most normies are fucking stupid, like the one you are replying to, that thinks Google cares about it's users. Fuck Google.
reply
andybak
46 minutes ago
[-]
But surely there's a way to do this without totally killing valuable functionality? It's like the Android Sideloading debate all over again.

Something that is very useful to 1% of users is stripped away. And we end up with dumb appliances (and ironically - most likely still no privacy )

reply
jeroenhd
12 minutes ago
[-]
You can probably get around this problem by compressing the file and uploading it in a .zip. Google Files allows for making zip files at least, so I don't think it's a rare feature.

I think the linked spec suggestion makes the most sense: make the feature opt-in in the file picker, probably require the user to grant location permissions when uploading files with EXIF location information.

reply
sixhobbits
36 minutes ago
[-]
yeah it does sound kind of dodge that there's no option even for advanced users to bypass this, I would guess mainly a moat to protect Google Photos. I wonder if online photo competitors are finding a workaround or not as searching your photos by location seems like a big feature there
reply
jeroenhd
10 minutes ago
[-]
I don't know when Google's EXIF protections are supposed to kick in, but so far my photos auto-synced to Nextcloud still contain location information as expected.

I don't think this has anything to do with Google Photos. People fall victim to doxxing or stalking or even location history tracking by third party apps all the time because they don't realize their pictures contain location information. It's extra confusion to laypeople now that many apps (such as Discord) will strip EXIF data but others (websites, some chat apps) don't.

reply
sylario
21 minutes ago
[-]
On reddit half of "the is it AI?" question are answered by "Yes, it say so in the metadata".
reply
jorvi
30 minutes ago
[-]
AFAIK a lot of the bigger sites / services already hide or outright strip EXIF.

Its better to do it from the source, obviously.

reply
master-lincoln
18 minutes ago
[-]
Because most people have no idea how the tools they chose to buy and operate work, the few rational people who educate themselves have to suffer...

This sounds like a downward spiral concerning freedom.

reply
darkhorn
54 minutes ago
[-]
I agree with you. The next steps should be to disable the internet nationwide like North Korea. People have no idea how much bad things are there. Also I don't like fun things.
reply
iamcalledrob
1 hour ago
[-]
Similarly, the native Android photo picker strips the original filename. This causes daily customer support issues, where people keep asking the app developer why they're renaming their files.

https://issuetracker.google.com/issues/268079113 Status: Won't Fix (Intended Behavior).

reply
lifis
49 minutes ago
[-]
Obviously an image picker shouldn't leak filenames... The filename is a property of the directory entry storing the file storing the image. The image picker only grants access to the image, not to directories, directory entries or files.

If you want filenames, you need to request access to a directory, not to an image

reply
butlike
35 minutes ago
[-]
The path is different than the filename though. If I want to find duplicates, it will be impossible if the filename changes. In my use case

/User/user/Images/20240110/happy_birthday.jpg

and

/User/user/Desktop/happy_birthday.jpg

are the same image.

reply
dns_snek
28 minutes ago
[-]
> it will be impossible if the filename changes.

Not impossible, just different and arguably better - comparing hashes is a better tool for finding duplicates.

reply
thaumasiotes
1 hour ago
[-]
This a very weird set of choices by Google. How many users are uploading photos from their camera to their phone so they can then upload them from the phone to the web?

I bet almost 100% of photo uploads using the default Android photo picker, or the default Android web browser, are of photos that were taken with the default Android camera app. If Google feels that the location tags and filenames are unacceptably invasive, it can stop writing them that way.

reply
47282847
1 hour ago
[-]
My phone: my private space. Anything in the browser: not my private space.

I want exactly that: the OS to translate between that boundary with a sane default. It’s unavoidable to have cases where this is inconvenient or irritating.

I don’t even know on iPhone how files are named “internally” (nor do I care), since I do not access the native file system or even file format but in 99% of all use cases come in contact only with the exported JPEGs. I do want to see all my photos on a map based on the location they were taken, and I want a timestamp. Locally. Not when I share a photo with a third party.

reply
TheLNL
46 minutes ago
[-]
It is not just a default when it is the only option.

The word default is more appropriately used when the decision can be changed to something the user finds more suitable for their usecase

reply
username223
30 minutes ago
[-]
> Anything in the browser: not my private space.

Google’s main business is ads, ie running hostile code on your machine.

reply
embedding-shape
1 hour ago
[-]
> If Google feels that the location tags and filenames are unacceptably invasive, it can stop writing them that way.

Something can be "not invasive" when only done locally, but turn out to be a bad idea when you share publicly. Not hard to imagine a lot of users want to organize their libraries by location in a easy way, but still not share the location of every photo they share online.

reply
eru
58 minutes ago
[-]
Definitely. I want to be able to search my Google Photos for "Berlin" and get me all the pictures I took there.
reply
klausa
58 minutes ago
[-]
> How many users are uploading photos from their camera to their phone so they can then upload them from the phone to the web?

To _their phone_ specifically? Probably almost nobody. But to their Google/Apple Photos library?

A lot, if not most of people who use DSLRs and other point-and-shoot cameras. Most people want a single library of photos, not segregated based on which device they shot it on.

reply
pmontra
15 minutes ago
[-]
I use to send pictures over the camera wifi from my Sony W500 to my phone. The main purpose is backup (think I'm in the middle of nowhere or with little internet for days) and then to send them to friends with WhatsApp. If I'm at home I pull the SD card and read it from my laptop. It's quicker.
reply
adzm
49 minutes ago
[-]
This is the right move. https://github.com/whatwg/html/issues/11724#issuecomment-419... and adding a feature to browsers to explicitly use the info is the best solution really. The problem is that there was a change without a backup solution without making a native app, but preventing people from accidentally uploading their location in an image is the right move. It really needs to be more well known and handled automatically.
reply
master-lincoln
4 minutes ago
[-]
I would agree if they switched the order: first make a UI to opt-in/out and then change the default. Now they just made operations impossible
reply
jeroenhd
7 minutes ago
[-]
While I think it's the right move to disable location tags by default, I also think Google should've waited until a solution to the missing functionality had at least hit the WHATWG spec.
reply
antiloper
43 minutes ago
[-]
I don't know a good solution for this. 99% of websites asking for this hypothetical permission would not deserve it. Users (rightfully) don't expect that uploading a photo leaks their location.

Element (the matrix client) used to not strip geolocation metadata for the longest time. I don't know if they fixed that yet.

reply
II2II
59 minutes ago
[-]
Yes, I get it. It is inconvenient for legitimate uses. The problem is that our devices leak too much confidential data. Privacy was mentioned outright in the article. Safety/security was alluded to with an example, which is something that goes far beyond a company's image or even liability.

Unfortunately, there is no good way to solve the problem while maintaining convenience. As the author noted, prompts while uploading don't really work. Application defaults don't really work for web browsers, since what is acceptable for one website isn't necessarily acceptable for another. Having the user enter the location through the website make the user aware of the information being disclosed, but it is inconvenient.

Does the situation suck? Yes. On the other hand, I think Google is doing the responsible thing here.

reply
celsoazevedo
39 minutes ago
[-]
For most users, I think this is a good change.

I used to run a small website that allowed users to upload pictures. Most people were not aware that they were telling me where they were, when the picture was taken, their altitude, which direction they were facing, etc.

reply
1970-01-01
53 minutes ago
[-]
>So, can users transfer their photos via Bluetooth or QuickShare? .. Literally the only way to get a photo with geolocation intact is to plug in a USB cable

Bluetooth is not QuickShare, stop conflating them. Bluetooth works. I just tried it. It just sends the entire file to the destination, filename intact with all EXIF, no gimmicks, tricks, or extra toggles. As it has always done for 20+ years.

reply
edent
7 minutes ago
[-]
OP here. I'm not conflating them. That's why I used the word "or".

I don't know how modern your Android phone is, but on all of mine sharing via Bluetooth strips away some of the EXIF.

reply
bilsbie
28 minutes ago
[-]
Does iPhone do this? Kind of scary to be accidentally sending your home address anywhere you upload a photo.
reply
nozzlegear
7 minutes ago
[-]
You can choose whether you want to share the location or not when selecting photos in iOS. You'll see at the bottom a label that says "Location is included", and you can click the three dots to remove location:

https://imgur.com/a/lm0stDE

Not sure if there's a way to do that by default, I've never checked.

reply
sambellll
1 minute ago
[-]
I feel like that's the optimal implementation - best of both worlds

Wish android copied them for once lol

reply
egeozcan
1 hour ago
[-]
This must be a Chrome thing, not an Android thing, no? I didn't test this but I'd be surprised if Firefox behaved the same.
reply
fouc
1 hour ago
[-]
Or Firefox would still be using android's file system / upload process, which probably hands off the photos with geotags stripped already.

I'm pretty sure this is what happens in the iPhone at least, so I'd imagine it is the same in Android.

reply
darkhorn
1 hour ago
[-]
Just tested with Firefox 149 on Android 13. There are no coordinates when I upload an image to EXIF viewer web sites.
reply
flipped
43 minutes ago
[-]
GrapheneOS already does this, since forever. Android can't stop copying GOS. Maybe they'll add a network toggle after a few years and call it a privacy win.
reply
edent
48 seconds ago
[-]
I don't think that's quite right. Up until recently I was able to share photos with geolocation from my GrapheneOS device.
reply
HumblyTossed
1 minute ago
[-]
Good?
reply
palata
5 minutes ago
[-]
> Android can't stop copying GOS.

Well that's a good thing, isn't it?

reply
p_stuart82
31 minutes ago
[-]
defaulting to strip location on share, fine. demoting plain old <input type=file> into "find a usb cable" / "go build an app" is a hell of a line to draw
reply
zenmac
52 minutes ago
[-]
Nice drunk theme! All web site should have one.
reply
eminence32
54 minutes ago
[-]
> But it is just so tiresome that Google never consults their community. There was no advance notice of this change that I could find. Just a bunch of frustrated users in my inbox blaming me for breaking something.

I get it. This unequivocally sucks. It's a clear loss of functionality for a group of people who are educated about the advantages and disadvantages of embedded EXIF data. But I don't honestly think Google could have consulted their community. It's just too big. So when the author says:

> Because Google run an anticompetitive monopoly on their dominant mobile operating system.

I don't think the problem here is that Google is anticompetitive (though that's a problem in other areas). I think it's just too big that they can't possibly consult with any meaningful percentage of their 1 billion customers (or however many Android users are out there). They may also feel it's impossible to educate their users about the benefits and dangers of embedded location information (just thinking about myself personally, I'm certain that I'd struggle to convey they nuances of embedded location data to my parents).

I will note that Google Photos seems to happily let you add images to shared albums with embedded location information. I can't recall if you get any privacy-related warnings or notices.

reply
softwaredoug
59 minutes ago
[-]
Is location sharing something you can disable in iOS?
reply
ndegruchy
51 minutes ago
[-]
Yes. You can turn it off for Camera if you don't want the geotag to be included in the photo when taken. You can also, as part of the share media picker, opt to include or exclude location data on the photo.
reply
adrianN
1 hour ago
[-]
How good are LLMs at geoguessing?
reply
jillesvangurp
15 minutes ago
[-]
Pretty good. I played a bit with gpt-4 a year or so ago by feeding it random screenshots from Google street view. It will pick up a lot of subtle hints from what otherwise looks like generic streets. I imagine more recent models might be better at this now.
reply
jcalx
24 minutes ago
[-]
Quite good, per Bellingcat [0] — Google Lens and ChatGPT could localize the majority of their test photos pretty specifically.

[0] https://www.bellingcat.com/resources/2025/08/14/llms-vs-geol...

reply
firtoz
44 minutes ago
[-]
Pretty good. I test it every now and then from random photos. Sometimes spot on, sometimes gets very close, unless it's really ambiguous.
reply
embedding-shape
1 hour ago
[-]
Basically all up to the training data, as things often are.
reply
xg15
48 minutes ago
[-]
I wonder if that might be another reason to just completely disable this feature and not make it a permission: otherwise people could use it to build trainingsets for geoguesser models.
reply
GRiMe2D
45 minutes ago
[-]
People already uploaded tons of images and data while playing Pokemon GO. Probably model is already has been built and being tested right now
reply
eru
58 minutes ago
[-]
You still need some smarts, since the picture you just took won't be in the training data.
reply
izacus
28 minutes ago
[-]
Apple was massively praised when they started stripping location data from shared and uploaded photos.
reply
embedding-shape
1 hour ago
[-]
Couldn't you use <input type="file" accept=".jpg,.jpeg"> (different than image/jpeg mime-type I think, not sure if that also strips EXIF?), then manually parse the EXIF in JS? Shouldn't be that complicated to parse and I'm guessing there is a bunch of libraries for doing just that should you not want to do that yourself.
reply