Article

The Risks of Metadata: Why Shared Files Leak Data

A file can reveal more than its visible contents. Inspect a separate delivery copy, remove unnecessary metadata with the right tool, and verify the version recipients receive.

Published Oct 16, 2026
The Risks of Metadata: Why Shared Files Leak Data

A photograph can reveal where it was taken. A proposal can reveal its author's name or comments that were never meant for the client. These details may travel inside the file even when its visible contents look ready to share. A private download link controls access; it does not remove information from the downloaded file.

My recommendation is to keep your original, prepare a delivery copy, and inspect that exact copy. Different file formats need different checks. A command that works on a JPEG is not a universal cleanup method for PDFs, Office documents or videos.

What a file can reveal

Photo metadata can include capture time, camera details, copyright information and GPS coordinates. Not every image contains every field. Coordinates matter especially when a picture identifies a home, a private workplace or a location you did not intend to disclose.

Documents can carry author names and editing history. Comments, hidden worksheets and embedded attachments can disclose more substantial material. Those are not all metadata in the narrow sense, but a sharing review needs to consider them alongside ordinary file properties.

Also check the filename and the visible content. Removing GPS does not hide a street sign in the image. Renaming a file does not remove its embedded author. A useful review checks both layers instead of assuming that one cleanup action covers everything.

Start with a separate delivery copy

  1. Preserve the original in your normal working location. Make a copy in a separate delivery folder so cleanup cannot silently replace your master.

  2. Decide what the recipient needs. A designer may need a color profile; an editor may need recording dates; a publisher may need a copyright credit. Remove unnecessary private fields without discarding useful information by habit.

  3. Inspect the copy with a tool suited to its format. A basic Properties or Info panel is a starting point, not a complete inventory of hidden data.

  4. Remove the unwanted information, save, reopen and inspect again. Review the exported PDF or image too, because an export can introduce its own author or software fields.

  5. Share only the checked copy. Download it through the recipient link and confirm that you did not accidentally upload the untouched original or a folder containing both versions.

For example, a property photo may need its description and copyright credit but not home coordinates. A client proposal may need final prices but not internal comments. I would write down that distinction before choosing a blanket “remove all” option.

Inspect photos with ExifTool

ExifTool reads many metadata formats locally. With it installed, run this command on a copy of your photo. The options show duplicate tags, unknown tags and their groups, making repeated location or author fields easier to spot.

exiftool -a -u -G1 -s "delivery-photo.jpg"

Read the complete output. Look for location, names, descriptions, timestamps and serial numbers relevant to your privacy concern. ExifTool's command documentation explains that ordinary inspection may omit embedded or expensive-to-extract metadata; its output is not a certificate of anonymity.

A JPEG cleanup example

For a JPEG delivery copy, the following example writes a new output file and leaves the named input alone. Choose an output filename that does not already exist.

exiftool -all= -o "share-clean.jpg" "delivery-photo.jpg"
exiftool -a -u -G1 -s "share-clean.jpg"

Open share-clean.jpg and check its orientation and color before using it. Blanket deletion can remove display-related information as well as private tags. ExifTool's metadata deletion FAQ discusses preserving color information and warns against removing all metadata from formats such as proprietary RAW files.

If color fidelity, attribution or orientation matters, use a selective workflow or the format-specific guidance instead. The example above is deliberately limited to a JPEG copy. Do not apply it recursively to a mixed folder of camera originals.

Check video metadata separately

Inspect the actual video, including location and recording details, before sending it. ExifTool's writer limitations say MOV and MP4 cleanup removes most top-level metadata. That is narrower than removing every possible embedded tag or timed GPS track.

For footage needing stricter privacy, use a workflow that understands the container and its streams. Inspect the resulting export, play it through, and confirm that audio, rotation and color still work. A general photo cleaner cannot establish that a video contains no sensitive data.

Remember the other channels: spoken names, notifications, reflections and visible addresses can survive perfect metadata removal. Review the picture and soundtrack when those details matter.

Inspect Office documents before exporting

On supported desktop Office versions, use Microsoft's Document Inspector. The relevant checks include document properties, comments, revisions and hidden content; availability varies by application and version.

  1. Save a separate copy. Open File, then Info, Check for Issues and Inspect Document.

  2. Select the inspection categories you need and run Inspect. Review each finding before choosing Remove All for that category.

  3. Review hidden spreadsheet rows and sheets before deleting them. Removing data can change formulas and the numbers shown in the final workbook.

  4. Reinspect, save and reopen the copy. If you export to PDF, inspect that PDF independently before delivery.

Turning off the display of comments or tracked changes does not establish their removal. Microsoft also lists information the inspector cannot remove. Embedded objects and external links deserve a manual review, especially when a workbook or presentation incorporates material from another project.

Sanitize PDFs with PDF tools

Do not use ExifTool's delete command as a secure PDF cleanup. Its PDF documentation explains that updates are incremental and reversible: the earlier information remains in the file. An empty-looking author field does not establish that the original value is gone.

Use a PDF tool with a documented sanitization feature. Adobe distinguishes visible redaction from hidden-data sanitization. Drawing a rectangle over text is not a substitute for applying redaction.

  1. In Acrobat Pro, open a delivery copy and choose All tools, then Redact a PDF. Apply proper redactions for visible sensitive content.

  2. Select Sanitize document. Choose Remove all, or selectively review the hidden-information categories you need to remove.

  3. Save to a new filename. Reopen it and check document properties, attachments, comments and the visible pages before sharing.

Adobe's sanitization instructions specify saving the file to remove the selected content. A black box in a screenshot proves little about the underlying PDF.

Protect the checked delivery copy

Upload the reviewed file through the homepage uploader and use a link password where appropriate. Big File Sharing protects transfer traffic with TLS; a password controls downloading. Neither measure cleans embedded metadata or prevents a recipient from keeping a downloaded copy.

The first guest send is free, guest links last 24 hours, and later sends require a free account. Check current retention and limits before delivery. Expiry reduces the link's availability; it does not recall copies already downloaded.

Send large files privately

Need to share files after reading? Upload with our free transfer — no signup, encrypted, auto-Deleted in 24 hours.

Upload Files

Comments

No comments yet. Be the first to comment!