Being a good web denizen: Don't strip EXIF metadata from photos

The biggest concern is phones store location data in EXIF. It's likely cheaper for most websites to just strip everything rather than modifying those records alone.

Also if you throw a TIF(F) into Imagemagick and resize it the original image could be part of the EXIF data as a blob. (been a few years but I remember 400x400px images being 8mb the same as the original input)

Erring on the side of privacy by removing EXIF metadata seems like the right default to me.