If this sounds like your week
Every share is a leak until you prove the EXIF is clean.
Searchers type “HEIF HEIC family archive export strip location tags” after a close call or a policy reminder. The risk is not theoretical: GPS, owner fields, and software strings embed in files people already sent. Apple-centric households export HEIC to share with Android relatives; GPS silently survives “compatible” conversions.
Where tooling usually breaks
Cloud “scrubbers” add a new trust boundary.
Uploading sensitive work to a random site to remove sensitive data is a category error. The fix should be on-device, deterministic, and boring.