Can Apps Read My Photos?
Yes — if you grant full photo library access, an app can technically read every photo and video on your device, including metadata like GPS location. Instagram, TikTok and other major apps' privacy policies confirm they collect photos you upload and associated metadata. On iOS 14+ and Android 13+, you can limit access to selected photos only.
What Major Apps' Policies Say About Photo Access
Instagram's privacy policy states they collect "photos and videos you take or upload" and "information about the content you create, like the metadata associated with your photos." The policy notes this metadata can include location data embedded in photos.
Full assessmentTikTok
TikTok's privacy policy states they collect "images and audio" from user content and "metadata associated with the content you create." TikTok also states they may collect "faceprints" from photos and videos you upload.
Full assessmentMeta's privacy policy states they collect "photos and videos you take or upload" and use this content for features including facial recognition (where permitted), content moderation, and advertising personalisation.
Full assessmentHow to Limit Photo Access
- iOS 14+: Settings > Privacy & Security > Photos — choose "Selected Photos" instead of "All Photos"
- Android 13+: Settings > Apps > [App] > Permissions > Photos and Videos — grant access to specific media only
- Before uploading: strip EXIF metadata using a free tool to remove embedded GPS location from photos
- Review which apps have photo access regularly — revoke access for apps that don't need it
Frequently Asked Questions
Can apps read all my photos if I grant photo access?
Yes. If you grant 'Full Access' to your photo library, an app can read every photo and video on your device, including metadata like location and date. On iOS 14+, you can grant 'Selected Photos' access to limit this. Android 13+ introduced similar granular permissions.
What does Instagram's privacy policy say about photo access?
Instagram's privacy policy states they collect 'photos and videos you take or upload' and associated metadata. The policy notes they may analyse content for features like automatic alt text and content moderation. Instagram is owned by Meta, so this data may be shared across Meta's platforms.
Can apps access photo metadata like location?
Yes. Photos taken on smartphones contain EXIF metadata including GPS coordinates, date, time, and device model. When you upload a photo to an app, the app can read this metadata unless you strip it first. Instagram's and TikTok's policies both acknowledge collecting metadata from uploaded content.
How do I stop apps reading my photos?
On iOS: Settings > Privacy & Security > Photos — set each app to 'None' or 'Selected Photos'. On Android 13+: Settings > Apps > [App] > Permissions > Photos — you can grant access to specific photos only. Revoking photo access means you cannot upload photos from that app.
Do apps scan photos I haven't uploaded?
If you grant full photo library access, an app technically has the ability to read all photos — not just ones you upload. However, major apps' privacy policies generally state they only process photos you actively share. Apple's on-device CSAM scanning was a notable exception that was later cancelled.