Photo metadata left on a used phone, camera, or SD card

This comes up more often than it sounds like it should: a used phone bought online, a camera picked up secondhand for cheap glass and an old sensor, a memory card that came bundled with a drone or a dash cam, a laptop or tablet handed down inside a family rather than sold. In each case the storage was not empty when it arrived. Someone else's photos, and sometimes their account state, came along with the hardware.

Why a factory reset is not the end of the story

A factory reset is designed to put a device's own internal storage and settings back to a clean slate, and on modern phones it generally does that job for the storage built into the device. The gap is removable storage. Many phones, most standalone cameras, and almost all dash cams or drones treat a memory card as separate portable storage rather than something the reset reaches into. Wikipedia's overview of factory resets is direct about this for phones: "Pre-installed applications and data on the card's storage card (such as a microSD card) will not be erased." A seller who resets the phone and ships it with the card still inside has, without necessarily realizing it, handed over a second, unreset drive.

The same article is also a useful check against the opposite assumption — that a reset or a simple delete makes data forensically gone. It cites a study by the security firm Avast reporting that data from devices that had been reset was "recoverable using forensics software that is fairly generic and publicly available." Neither fact is a reason for alarm on its own; together they explain why the honest answer to "is this really gone" is usually "probably, for the phone itself, and not necessarily for the card" rather than a flat yes.

What you are likely to actually find

On a phone or tablet: a camera roll that was not fully cleared, which can carry EXIF timestamps, device model, and GPS coordinates for wherever the previous owner stood when each photo was taken, plus occasionally a signed-in cloud account that is a separate risk from any individual file. On a standalone camera: photos on internal memory and, far more often, on a card that was never swapped out, sometimes going back years because nobody reviews a full card before selling the body. On a drone or dash cam: a card that defaults to recording continuously, so what is left behind is frequently someone's commute, their driveway, or flight paths near their home rather than anything they chose to keep.

None of this means the previous owner behaved carelessly. Reset instructions rarely call out the card as a separate step, and a camera's "format card" option — when someone remembers to run it — commonly performs a quick format that clears the file table without overwriting the image data underneath it, which is a different operation from a secure erase even though both can report "card is empty."

A workflow for both sides of this

If you are the one who just acquired the device: do not forward, post, or otherwise redistribute anything you find. Decide once whether to delete it outright or, in the rare case there is an obvious way to get it back to the previous owner (a named seller on a local marketplace, a camera bought at an estate or garage sale with a visible point of contact), offer to return it instead of keeping it. Check the memory card as its own object rather than assuming a phone or camera that looks "reset" also reset the card. If a specific photo has a legitimate reason to be kept — a camera manual's sample shots, a stock prop photo the seller intentionally left as a demo — that is the point at which a tool like this one is relevant to that one file, not to the discovery itself.

If you are the one selling or passing a device on: run the device's own factory reset first, since it is still the right baseline step for internal storage. Then treat any memory card as a second job: pull it, mount it on a computer, and do a full reformat rather than trusting the camera's own quick-format option, or simply replace the card if what was on it mattered. For a phone's internal storage, a modern full factory reset through the device's own settings is the correct tool; this site's processing of one photo at a time is not a substitute for it and was never built to be.

Where this tool fits, and where it doesn't

MetadataWipe takes a single JPEG or PNG you choose, runs a quick heuristic scan of roughly the first half-megabyte of the file for EXIF, GPS, and PNG metadata markers, and rebuilds it on a canvas into a copy without those markers, downloaded with -metadatawipe added to the filename. All of that happens on whichever device you are using at the time — there is no step where the file is sent anywhere to be processed. That is useful for the one photo you have decided to look at, after you have already found it. It is not a device scanner: it cannot list what else is on a card, cannot tell you whether a device was properly reset, cannot recover a photo someone else already deleted, and cannot securely erase a drive. Those are jobs for a file manager, a factory-reset menu, and a disk-formatting utility, roughly in that order, and this page is about recognizing which job you are actually facing before reaching for any tool at all.

Common mistakes and misconceptions

"I factory reset it, so the card is clean too." The reset is built around internal storage. A card used as portable storage is routinely left untouched, and the previous owner's photos are still on it.

"The gallery app says there are no photos, so it's empty." An app showing nothing reflects its own index, not the state of the storage underneath. Deleted files are frequently still present and recoverable until something overwrites that space.

"I own the device now, so I own the photos on it." Owning the hardware is not the same as having any right to the images it happens to still contain. The safer default is deletion or return, not reuse.

"Formatting the card in the camera is a secure wipe." A quick format most cameras run clears the card's file table, not the underlying image data, which is why "format complete" and "data gone" are not the same claim.

"A browser tool like this one could check the whole card for me." It only ever sees the one file you hand it. Surveying a card's contents is a file-manager job that happens before this tool is relevant at all.

Related guides

See also:

• Cleaning photo metadata on a device you don't control
• Can metadata you already deleted be recovered?