If this sounds like your week
Every share is a leak until you prove the EXIF is clean.
Searchers type “bulk remove GPS from screenshots for security awareness training” after a close call or a policy reminder. The risk is not theoretical: GPS, owner fields, and software strings embed in files people already sent. Training decks reuse realistic phone screenshots where embedded coordinates teach the wrong lesson accidentally.
Where tooling usually breaks
Cloud “scrubbers” add a new trust boundary.
Uploading sensitive work to a random site to remove sensitive data is a category error. The fix should be on-device, deterministic, and boring.