Your photo probably knows where you live
A phone photo taken at home with location tagging switched on carries the GPS coordinates of your home inside the file. Phone GPS is typically good to about 5 metres under open sky, and less precise indoors. Anyone who receives that file can read them in a few clicks. It is not visible, it is not obvious, and it is easy to forget it is there. Drop a photo above and you will see exactly what yours is carrying.
Where this actually bites people
- Selling something online. A photo of the item, taken in your living room, can tell a buyer where you live before they have said hello.
- Renting or listing a property. The same, in reverse, with dates attached.
- Photos of children. Location plus a timestamp is more than most parents intend to publish.
- Anything anonymous. A single photo can undo a lot of care taken elsewhere.
- Work photos. Camera serial numbers tie a set of images to one device, which is sometimes exactly what you do not want.
Why this cannot leave anything behind
Some tools delete the metadata fields they know about, which means anything unusual can survive. This one does not edit your file at all. It decodes the image to raw pixels, then writes a brand new file from those pixels. The output has no history, because it was not made from the original file, only from the picture inside it.
The side effect is that everything else goes too, including the colour profile and the rotation flag. Browsers apply the rotation flag when they read the photo, so it normally comes out the right way up; the rotate buttons are there for the odd one that does not.