If this sounds like your week
Every share is a leak until you prove the EXIF is clean.
Searchers type “bulk remove GPS from Nikon NEF JPEG preview metadata” after a close call or a policy reminder. The risk is not theoretical: GPS, owner fields, and software strings embed in files people already sent. RAW containers can embed preview JPEGs with GPS that survives naive “export JPEG only” workflows—especially risky when sharing selects before conversion.
Where tooling usually breaks
Cloud “scrubbers” add a new trust boundary.
Uploading sensitive work to a random site to remove sensitive data is a category error. The fix should be on-device, deterministic, and boring.