If this sounds like your week
Every share is a leak until you prove the EXIF is clean.
Searchers type “remove location from headshot retouching export folder” after a close call or a policy reminder. The risk is not theoretical: GPS, owner fields, and software strings embed in files people already sent. Retouchers receive RAW plus references shot at identifiable studios; embedded GPS leaks studio addresses.
Where tooling usually breaks
Cloud “scrubbers” add a new trust boundary.
Uploading sensitive work to a random site to remove sensitive data is a category error. The fix should be on-device, deterministic, and boring.