NearScrub

2026-10-09

Does your dating app photo reveal your home address? A 90-site study found GPS data survives on some profiles — but the riskier photo isn't the one there

Online dating runs on a sequence that almost no other everyday photo-sharing does: you send a picture of yourself to someone you've never met in person, specifically so a complete stranger can decide whether to meet you. If that photo still carries the GPS coordinate your phone recorded the moment you took it, you're not just sharing a face — you're handing that stranger the exact spot where you were standing, which, for a photo taken in a bedroom, a backyard, or an apartment hallway, is very often your own home.

What a 90-site study at CU Boulder actually found

According to a press release published by CU Boulder Today on January 12, 2012, students in the Leeds School of Business course "Privacy in the Age of Facebook," taught by associate professor Kai Larsen, tested 90 dating websites by creating two fictitious profiles — one to upload photos carrying embedded GPS data, the other to download those same photos and check whether the location data had survived. Of the 90 sites, 21 — about 23% — had not removed the location data from users' uploaded photos. Twelve of those 21 belonged to one company, Canada-based SuccessfulMatch.com, which ran 24 dating sites on a shared platform (12 of its sites weren't part of the study). The two largest sites tested, Match.com and PlentyOfFish.com, did strip the location metadata. That study is well over a decade old, the companies involved were contacted before publication and some reportedly fixed the gap, and we haven't tested any current dating site's own upload pipeline ourselves — so none of this is a claim that a named site mishandles photos today. What it documents is the pattern underneath: handling varies by site, size doesn't automatically mean it's done correctly everywhere, and an upload form that strips metadata cleanly on one platform can behave completely differently on another one built on different software.

The photo that study never tested is the one FindLaw actually warned about

That 2012 research checked the main photo you upload to your public profile — a path that runs through whichever image pipeline the dating site built for that one purpose. It didn't, and by design couldn't, check the photo you send a match directly once you've started talking: a second, more candid selfie sent through the app's own chat, by text message, by email, or after you've moved the conversation to WhatsApp or Instagram so the picture arrives uncompressed instead of resized. FindLaw's consumer-advice blog flags exactly this scenario in "Your Selfies' Metadata May Be Too Revealing": in an online-dating context, the post warns, a match receiving a selfie with its location data intact means "it's possible that person could figure out your exact location and show up unexpectedly." Whether that particular selfie keeps its GPS tag depends entirely on whatever channel the two of you happened to pick that day — a path nobody has audited the way CU Boulder's students audited profile uploads, and, per our own look at messaging apps, one where sending a photo "as a file" specifically to avoid compression can preserve exactly the metadata a normal in-chat photo send would otherwise have stripped.

Two photos in one dating conversation Public profile photo Goes through the dating site's own upload pipeline — what CU Boulder tested. Results varied: 21 of 90 sites kept GPS data (12 under one company). Match.com and PlentyOfFish stripped it — 2012 CU Boulder study. Selfie sent to a match Travels through whatever channel you two pick — chat, text, email, WhatsApp. Nobody audited this path. FindLaw warns a match could "figure out your exact location and show up unexpectedly" from it.
The profile photo is the one that's ever been checked by anyone. The selfie you send once you're actually talking to a match travels through a path nobody has studied, carrying whatever metadata it happened to keep.

Why a dating context raises the stakes past most other photo-sharing

Stripping GPS before posting a couch for sale is worth doing, but a stranger who gets your address from that listing still has to connect it to you personally. A dating photo skips that step entirely — it's a picture of your face, sent directly, to someone who already knows exactly who it belongs to and is, by the nature of the interaction, still a stranger you haven't vetted and haven't agreed to meet in person yet. A GPS tag in that file doesn't just reveal a location; it reveals where you, specifically, were standing, often at home, before you've chosen to share that with them yourself.

What scrubbing the photo before you send it changes

Running a JPEG through a client-side scrub — entirely in the browser, no upload to a server, the way NearScrub works — before sending it to a match, whether through the dating app's own chat, a text message, or email, removes the GPS coordinate and camera metadata from the file itself. At that point, it stops mattering whether that particular channel's own processing would have stripped it, or whether sending it "as a file" to preserve quality would have kept it intact — there's nothing embedded in the image left for either path to carry.

What this doesn't fix

A few honest limits. NearScrub supports JPEG, PNG, PDF, and Office files; it doesn't parse HEIC, the format an iPhone saves to by default — convert to JPEG first (your phone's own share sheet or Photos export does this) before there's anything for NearScrub to scrub. It removes what's hidden inside the file, not what's visible in the frame itself: a street sign, a house number, mail on a counter, or a recognizable view through a window are still there for anyone looking, metadata or not. It has nothing to do with your precise location as read by the dating app itself through your phone's location permission — that's a separate, platform-level data flow, not something embedded in a photo file, and scrubbing a photo doesn't touch it. And it only ever affects a copy at the moment you choose to run it through: a photo you already sent before reading this, or one a match has already saved to their own device, is outside anything a scrub can reach after the fact.

Sponsored
← NearScrub

This page shows ads only if you consent.