Monday, June 13, 2011

There's a location in my photo!


My family has been taking lots of photos recently. That's a good thing. But I wanted to learn how certain sites, especially Facebook, handle privacy of photos marked with location. I'm all for sharing location for lots of places, but not our family and friends' houses or our place. Do sites allow me to control this?

First, a little background.

You might already know that some modern cameras, especially camera phones, can record the location a photo. Some photo editing software can do the same, even if the photo was scanned from a paper photo. The process is called geotagging and location is typically stored as latitude and longitude within the photo image. That is, location isn't part of the photo that you see, but part of the file that is created. Some photo software detects location, some doesn't.

Whether location is stored, and how accurate it is, depend on a few factors. The camera does not necessarily need GPS to know its location. There are other technologies for approximating location, such as ip location, wifi location, and mobile phone tracking. Depending on the hardware involved and environmental conditions, such as the weather for GPS, the recorded location can be fairly precise.

My experiment was fairly simple. I started with a vacation photo from last summer. The camera we used did not record the location, so I added it on my computer using Microsoft's Pro Photo Tools. The tool allowed me to put a marker on a map, in Dillon, Colorado, and save the photo back to my computer with the location embedded.

I then uploaded the photo to three web sites to see if the location in the photo would automatically be shared with anyone who viewed, or downloaded, the photo.

Here are my results.
  1. Flickr - The Flickr site did exactly what I'd hoped. By default, the location of the photo was not available to others. When I clicked the optional "Add this photo to your map" option, Flickr displayed the message "Your camera has suggested that your photo was taken in this location". Kudos to Flickr for this message, and the word "suggested" since there's no guaranteed accuracy. Flickr then gave me the option to keep location private or share it. And within my account privacy settings, Flickr gives the option to automatically import location data (off by default) for new photos. This would be handy if I didn't want to go through the privacy step for each photo. Anyway, to verify Flickr kept location private, I viewed the photo as if another user would (not logged in), saved it to my computer, and inspected it with Pro Photo Tools. As expected, Flickr removed the location from the file for download.
  2. Panaramio - Panaramio did the complete opposite of Flickr. The location of my photo was instantly available to anyone I shared the photo with. There was no option I could find to make location private, remove it completely, or to change the location privacy in my account settings. There is a feature to enable photo location with Google Latitude (off by default), but that didn't protect the upload I did today. I suppose the only saving grace is that Panaramio showed a map right next to the photo with the photo location, so if I was paying attention I'd see that location was detected.
  3. Facebook - Facebook did something odd that left me a little uncomfortable. It never asked if I wanted to keep location private or share it. It didn't display a map or location name. It didn't seem to recognize the location at all. And when I downloaded the photo, the location wasn't part of the file. So what made me uneasy? I couldn't find anything in Facebook help or privacy settings about location at all. Nothing that said location is automatically removed and not stored anywhere on Facebook computers. And nothing that said if Facebook some day decides to add a photo location feature, that they will only share my photo locations if I explicitly allow it. If these things are written somewhere, I'd love to see them. Until then, I'll be sure to remove sensitive locations before I upload to Facebook, and remind my family and friends to do the same.
So, top scores to Flickr. With 148 million publically-geotagged photos, and presumably many more with private location, it's good to know they're on their game when it comes to privacy and user control.

2 comments:

Unknown said...

Nice job on figuring out how the different services deal with your photo's geo data.

I guess, when it comes down to it, that privacy is really a user's responsibility to a certain extent. When you post something on the Internet, I think it is unrealistic to trust that the service will implement perfect privacy policies and controls. There are just too many variables. Sure they should do their best, but don't expect perfection.

Basically, once you post a file to the Internet for sharing purposes, you have lost control of the content. Your friends can and sometimes will re-post your file somewhere else, and you wouldn't even know.

So if it is privacy you are looking for. Don't share your files at all or don't post anything that you don't want going public.

Chris said...

@Rick - Very good point. I guess the first step is education, as in, did you know your photos may have location in them? Once people understand, then they can begin to protect themselves. The challenge is the pace of technology change and how quickly it gets in people's hands. I'm all for new capabilities, but industry needs to help people through these changes, especially when privacy is affected. Without that help, those who share may release more than they realize, and those who are afraid don't share at all.