Dev.to
7/20/2026

Strip Location From Both Halves of an iOS Live Photo Before Upload
Short summary
iOS Live Photos contain both a still image and a paired video, and scrubbing EXIF from the JPEG alone leaves location metadata exposed in the video resource. Developers must enumerate all PHAssetResource types, assert no location metadata per output artifact, and test recovery paths where a scrubbed still could be paired with an unscrubbed original video. Server-side verification is essential because device-side inspection misses multipart manifests and queued originals.
- •Live Photos have paired video resources that can retain location metadata even when the JPEG is scrubbed
- •Build per-artifact privacy assertions and lifecycle tests that kill the app mid-upload to verify recovery
- •Verify stored assets server-side, not just on-device, to catch queued originals and multipart manifest leaks
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



