iPhone Photo Privacy Settings: 7 to Change

Why iPhone Default Settings Expose Your Photos

Apple's iCloud data security overview says standard iCloud Photos is encrypted with keys Apple holds; only Advanced Data Protection moves the keys to your devices. And with Camera location on, every photo you take is tagged with where you took it, a tag that travels with the file whenever you share it.

The settings that change this are spread across four places in Settings, and one of them lives in the share sheet rather than in Settings at all. The table below puts each one next to what Apple documents as its default and the menu path Apple prints for it.

Viallo is a private photo sharing platform that lets you create photo albums and share them through a link. Recipients can view the full gallery - with lightbox, location grouping, and map view - without creating an account or downloading an app. Photos are stored in full resolution, every album is private by default, and you can revoke a share link at any time.

What Does a New iPhone Set by Default?

On 26 October 2026 a newly created iPhone 17 Pro simulator running iOS 27.0 (24A434) was read from disk before anything was changed. The middle column is what it stored; the next two are quoted from Apple's own support and privacy pages on the same day, linked in each cell. A setting nobody has touched is not written to disk, so "no stored value" means the system default applies and Apple's page is the source for what that default is.

The 0 is what a device nobody has used looks like: the simulator had no third-party apps installed. Photo access builds up one app and one tap at a time, which is why the audit in the next sections is worth doing on a phone you have used for a while.

Turn Off Location Data in Photos

This is the setting with the widest reach. Apple's Photos privacy page says that if you allow Camera to access your location, it is used to tag where photos and videos are taken, and its personal safety guide warns that the people you share such a photo with may be able to read the location and learn where it was taken. For a deep dive into why this matters, see our guide to photo location data risks.

How to disable it:

1. Open Settings
2. Tap Privacy & Security
3. Tap Location Services
4. Scroll down and tap Camera
5. Under Allow Location Access, select Never

Your photos will still look the same. You just won't be broadcasting your exact coordinates every time you share one. If you've got years of geotagged photos already, learn how to remove EXIF data from existing photos.

Review Which Apps Can Access Your Photos

Apple names two levels of photo access for each app: Allow Full Access and Limit Access. With Limit Access you pick which photos and videos the app may see. Full Access opens the whole library, and Apple's Photos privacy page spells out two things it includes: the associated metadata, such as location, and your hidden photos even if the Hidden album is locked.

That second point is the one to act on. Locking the Hidden album keeps it from someone holding your unlocked phone, but not from an app you already gave Full Access.

How to audit app permissions:

1. Open Settings
2. Tap Privacy & Security
3. Tap Photos
4. Review each app and switch it to Limit Access unless it needs the whole library

If an app genuinely needs Full Access (like a photo editor), keep it. For everything else, Limit Access is the right call.

Lock Down iCloud Photo Settings

iCloud Photos syncs your library across devices, which is convenient. Under standard data protection, which Apple's iCloud data security overview says is the default for every account, the encryption keys are kept in Apple data centers so Apple can help you recover your data.

Advanced Data Protection (ADP) changes this. With it, the number of iCloud data categories under end-to-end encryption rises to 25, Photos among them. Turning it on asks you to review your recovery methods first. For a full breakdown, read our iCloud Photos privacy analysis.

Enable Advanced Data Protection:

1. Open Settings and tap your name at the top
2. Tap iCloud
3. Scroll down and tap Advanced Data Protection
4. Tap Turn on Advanced Data Protection and follow the prompts to review your recovery methods

One caveat from the same Apple page: the Shared Albums feature in Photos, and sharing content with "anyone with the link", do not support Advanced Data Protection.

Protect Hidden and Recently Deleted Albums

Apple added the lock with iOS 16, as The Verge reported when it was announced in June 2022. The current iPhone User Guide says both collections are locked by default and open with Face ID, Touch ID or your passcode. The switch is no longer under Settings > Photos.

Verify it's enabled:

1. Open Settings
2. Tap Apps, then tap Photos
3. Make sure Use Face ID (or Use Touch ID, or Use Passcode) is on

This is especially important because Recently Deleted keeps photos for 30 days. If you deleted something sensitive, it's still sitting on your phone for a month.

Change Your AirDrop Settings

Unsolicited photos over AirDrop are a recorded problem: British Transport Police recorded 66 reports of unsolicited photographs sent through means such as AirDrop in 2019, up from 3 in 2016, according to The Guardian.

Lock it down:

1. Open Settings
2. Tap General then AirDrop
3. Select Contacts Only or Receiving Off

If you need to receive from a stranger, Everyone for 10 Minutes turns itself back after 10 minutes: to Contacts Only if you are signed in to your Apple Account, to Receiving Off if you are not. Apple's AirDrop article dates that to iOS 16.2 and later.

Strip Metadata Before Sharing

When you share a photo from the Photos app, the share sheet has an Options menu. Apple's Camera privacy page says you can turn off location there, and its Photos page lists what else you control that way: the Live Photos video, the edit history and the location information.

The choice is made in the share sheet, so you have to remember it each time you share. Sharing services do not reliably do it for you either: Viallo, for one, keeps the original file, so a recipient who downloads a photo gets its metadata. Turning location off in the Camera settings is the fix that holds.

Hide Photo Previews from Lock Screen

A notification preview can put the content of a message on the Lock Screen, where anyone glancing at your phone can read it. Apple's notification guide lets you choose when previews appear for all apps at once or for one app.

Disable photo previews:

1. Open Settings
2. Tap Notifications
3. Tap Show Previews
4. Select When Unlocked or Never

To change it for a single app instead, tap that app below Notification Style before tapping Show Previews.

Understand Shared Library Risks

iCloud Shared Photo Library needs iOS 16.1 or later and holds up to six participants, including the organizer. It is different from Shared Albums: Apple's Shared Library guide says the photos you contribute move from your personal library into the shared one, and every member can view, edit and delete them.

Encryption depends on everyone in it. Apple's iCloud data security overview says Advanced Data Protection keeps shared content end-to-end encrypted as long as all participants have it turned on. Shared Albums and "anyone with the link" sharing do not support it at all. So if privacy is your priority, keep sensitive photos out of shared spaces you cannot vouch for. For sending photos securely to specific people, check our guide to sending photos securely.

How These Settings Compare to Android

Android has its own version of Limit Access: a system photo picker that hands an app only the photos you select. Google's developer documentation puts it on Android 11 and later, with a backport to Android 4.4 through 10 through Google Play services. On analysis, Apple says Photos runs scene classification and people identification on the device, while Google's Photos safety page claims encryption in transit and at rest and does not mention end-to-end encryption.

Our Google Photos vs iCloud comparison covers the two services side by side.

Your Privacy Checklist

Here's every setting from this guide in one list, with the paths Apple prints today.

1. Camera location: Settings > Privacy & Security > Location Services > Camera > Never
2. App photo access: Settings > Privacy & Security > Photos > switch apps to Limit Access
3. Advanced Data Protection: Settings > your name > iCloud > Advanced Data Protection > Turn on
4. Hidden album lock: Settings > Apps > Photos > Use Face ID > On
5. AirDrop: Settings > General > AirDrop > Contacts Only
6. Share sheet metadata: When sharing, tap Options > turn off Location
7. Lock screen previews: Settings > Notifications > Show Previews > When Unlocked

And keep sensitive photos out of an iCloud Shared Photo Library unless every member has Advanced Data Protection on.

How was this checked?

On 26 October 2026 a newly created iPhone 17 Pro simulator on iOS 27.0 (24A434) was read from disk with Xcode's simctl, plutil and a read-only sqlite3 query of its privacy database, then deleted; no physical iPhone and no Apple Account were involved. Every default and menu path not stored on the device was quoted from Apple's, Google's or a news site's own page on the same day. The values are in dataset.csv, and check.py re-creates the simulator and checks that every quoted sentence is still on its page.

Frequently Asked Questions

If you want to share an album without sending files around, try Viallo's free plan - 2 albums, 200 photos, and 10 GB of storage with no AI scanning, and no credit card required.