# What happens to a photo after you post it publicly

> A photo carries more than the picture, and public photos travel further than you think. Location data, face-search databases, AI training, and how to keep photos close.

By Suhail (One of the people who make Philos) · Published 24 Oct 2026 · 3 min read
Section: Our thinking · Topics: Privacy, AI
Source: https://getphilos.com/blog/what-happens-to-a-public-photo

## In short

- A photo can carry hidden details, including where and when it was taken. In 2012, one revealed where John McAfee was hiding.
- Public photos have been scraped into face-search databases. European regulators have fined Clearview AI more than €90 million.
- Since May 2025, Meta has trained its AI on public posts by adults in the EU. Private sharing keeps your photos out of reach.

In December 2012, journalists from Vice found John McAfee, the antivirus millionaire, who was on the run from police in Belize. They wanted to question him over a killing. The journalists posted a photo of him online.

Readers soon noticed something the journalists hadn't. Hidden inside the photo file were the GPS coordinates of where it was taken, in Guatemala. McAfee first claimed the data was faked. Then he admitted it was right.

The picture showed a man. The file showed where he was.

## What a photo carries

Every photo from a phone is two things: the picture, and a small record attached to it. That record, known as EXIF data, can include:

- the date and time it was taken,
- the make and model of the camera or phone,
- and, when location is switched on, the exact place: latitude, longitude, even which way the camera was facing.

Many apps now strip this data when you upload. Not all do, and photos sent as files often keep everything.

## The noticeboard at the station

Posting a photo publicly is like pinning it to the noticeboard at a busy railway station.

- **Anyone walking past can see it.** Strangers stop to look as well as friends.
- **Anyone can copy it.** A quick phone photo, and it's theirs.
- **You can take yours down.** But the copies stay with whoever made them.
- **Some passers-by aren't people.** They're machines, copying every board in every station, all day.

That last point is the one most of us miss.

## The machines at the board

Clearview AI built a face-search tool by automatically collecting public images from across the web, social media included, and turning the faces in them into searchable codes. By 2024, the Dutch data protection authority put its database at 30 billion images.

European regulators have pushed back hard. Italy, Greece and France each fined Clearview €20 million in 2022, and France added a further €5.2 million penalty in 2023 when the company didn't comply. In 2024, the Netherlands fined it €30.5 million. The Dutch regulator's chair, Aleid Wolfsen, said the company "cannot continue to violate the rights of Europeans and get away with it". In the UK, a separate case is still going through the courts.

AI training is the other kind of collection. In May 2025, after a pause requested by Ireland's data protection regulator, Meta began training its AI on public posts, comments and photos shared by adults on Facebook and Instagram across the EU. Private messages are excluded, and there's a form to object. And as Human Rights Watch found in 2024, photos of children had already ended up in a large AI training dataset. We wrote about [why your photos don't train AI on Philos](https://getphilos.com/blog/your-photos-dont-train-ai).

## Stories change as they travel

Even when no machine is involved, a public photo loses its context as it moves. In a 2015 study, researchers asked people to pass a balanced news story along a chain, one person to the next. With each retelling, the message got shorter, less accurate and more negative.

A photo shared on is the same. The caption you wrote stays behind. Someone else writes a new one.

## Keep your photos close

You don't have to stop sharing. You just have to choose the right wall.

1. **Check your camera's location setting.** On an iPhone, it's in **Settings**, **Privacy & Security**, **Location Services**, **Camera**.
2. **Turn location off when you share a photo.** In the iPhone share sheet, tap **Options** and switch off **Location**.
3. **Share with people, not the public.** A photo for twelve people doesn't need to be on a board for millions.

## How Philos handles your photos

On Philos, there is no noticeboard. Nothing is public, every photo goes only to the people you choose, and nothing can be forwarded. Philos removes location and camera details from every photo you share, in posts, Moments and chats. Someone you haven't added sees only your name and photo. And your photos are never used to train AI.

Tonight, try one thing: open your camera's location setting and decide, on purpose, what it should be.

## Questions people ask

### Can a photo reveal where it was taken?

Yes. Phones can save location, time and camera details inside a photo file. Many apps remove them, but not all, so it's worth checking your camera's location setting.

### Does Philos keep the location in my photos?

No. Philos removes location and camera details from every photo you share in posts, Moments and chats.

### Are public photos used to train AI?

Some are. In the EU, Meta began training its AI on public posts, comments and photos shared by adults on Facebook and Instagram from 27 May 2025, with a form to object.

## Sources

- [Reporter's iPhone photo reveals John McAfee's location](https://www.nbcnews.com/tech/tech-news/reporters-iphone-photo-reveals-john-mcafees-location-flna1c7446179), NBC News
- [How to ditch photo metadata](https://www.cjr.org/behind_the_news/how_to_manage_metadata.php), Columbia Journalism Review
- [Clearview AI hit with its largest GDPR fine yet](https://techcrunch.com/2024/09/03/clearview-ai-hit-with-its-largest-gdpr-fine-yet-as-dutch-regulator-considers-holding-execs-personally-liable), TechCrunch, 3 Sept 2024
- [Imposition of fine on Clearview AI, Inc](https://www.dpa.gr/en/en/enimerwtiko/prakseisArxis/imposition-fine-clearview-ai-inc), Hellenic Data Protection Authority
- [Riconoscimento facciale, il Garante privacy sanziona Clearview per 20 milioni di euro](https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/9751323), Garante per la protezione dei dati personali, 9 Mar 2022
- [DPC statement on Meta AI](https://www.dataprotection.ie/news-media/latest-news/dpc-statement-meta-ai), Data Protection Commission, Ireland
- [The amplification of risk in experimental diffusion chains](https://pmc.ncbi.nlm.nih.gov/articles/PMC4426405), Moussaïd, Brighton and Gaissmaier, PNAS

---

© 2026 Philos. From the Philos blog: https://getphilos.com/blog/what-happens-to-a-public-photo
