If you own an iPhone with default settings, your photos are saved as HEIC (High Efficiency Image Container) files with a .heic extension. The format uses modern HEVC compression to produce files roughly half the size of an equivalent JPEG at the same quality. That is genuinely good engineering. It also means that the privacy concerns people learned about JPEG EXIF apply just as much here — and that HEIC is technically harder to clean, which is why many older tools simply refuse to handle it.
What an iPhone photo actually stores
A HEIC photo straight out of the camera typically carries:
- GPS coordinates of where the photo was taken, accurate to within a few metres, including altitude
- The exact date and time of capture, down to the second, with time-zone offset
- The device make and model (e.g. Apple iPhone 15 Pro)
- The lens used and the camera settings (aperture, shutter, ISO, focal length)
- The iOS version that produced the file
- Depth and HDR auxiliary data on newer devices
- An embedded thumbnail for fast previews
The GPS data is the headline risk, for the same reason it is in JPEGs: it pins a private photo to a physical location — often your home, your workplace, or wherever you happen to be when you take a candid shot.
Why HEIC is harder to clean than JPEG
In a JPEG, metadata lives in clearly delimited segments near the front of the file; you can find the EXIF marker and cut it out. HEIC is structured completely differently. It is built on the same container format as MP4 video — a tree of "boxes" — and the metadata is not stored inline. Instead, a meta box holds an item information list (iinf) and an item location list (iloc) that point to where each piece of data physically sits in the file's data region (mdat).
Crucially, the image itself is also just an item described by that same meta box. So you cannot simply delete the metadata box — doing that would orphan the image and break the file. A correct HEIC cleaner has to be surgical:
- Parse the
iinfbox to map each item's ID to its type (for example, an item of typeExiformimefor XMP). - Parse the
ilocbox to find exactly which bytes inmdatbelong to those metadata items. - Zero out only those bytes, leaving the image item's bytes completely untouched.
- Mark the now-empty metadata items so a reader ignores them.
Because the image data is never altered, this approach is lossless — there is no re-compression and no quality change. This is exactly how our tool handles HEIC, which is why you do not need to convert to JPEG first.
The "just convert to JPEG" trap
A common piece of advice is to convert HEIC to JPEG to clean it. This works, but it has two downsides. First, converting re-compresses the image, so you lose a little quality and gain a larger file — the opposite of why HEIC exists. Second, and more importantly, the conversion step itself often copies the EXIF across into the new JPEG. People convert, assume the new file is clean because it went through a conversion, and end up sharing a JPEG that still carries the original GPS and device data. Cleaning the HEIC directly avoids both problems.
Does sharing through Apple's ecosystem strip this?
It depends entirely on how you share. AirDrop and Messages between Apple devices generally preserve the original file, metadata included. When you share to some third-party apps or social platforms, the receiving service may strip location on upload — but this is the platform's choice, it varies by service, and it changes over time. Relying on the destination to clean your file is the weak strategy. Stripping it yourself before sharing means the outcome does not depend on anyone else's policy.
Live Photos and bursts
Two iPhone features add wrinkles. A Live Photo is actually a still HEIC plus a short MOV video clip; if you share the Live Photo, the paired video carries its own metadata (including GPS) as discussed in our audio and video guide. A burst is a sequence of stills, each with full EXIF. In both cases, every component file should be treated as carrying location and device data.
How to clean iPhone photos
The straightforward path: export or save the HEIC files to a computer (or use them directly on a device with a browser), then drop them into our image tool. The tool detects the HEIC container, removes the EXIF and XMP items in place, and gives you back a clean .heic that still opens and displays normally. If you prefer JPEG output for compatibility, convert first and then clean the JPEG — but be aware the conversion may carry metadata across, so the cleaning step is what actually protects you.
You can strip HEIC, JPEG, and RAW metadata entirely in your browser using the image tool on our home page — no upload, no signup, nothing leaves your device. For the underlying mechanics of EXIF and GPS, see our guide on what your photos tell strangers.