For Amazon & Shopify Sellers: How Metadata Can Leak Your Secret Suppliers

A guy I know built a solid Amazon business selling kitchen gadgets. Decent margins, real reviews, actual product-market fit. He’d spent the better part of a year flying to Shenzhen, sitting in factory lobbies drinking tea that tasted like dirt, and eventually found a manufacturer who simply made better product than anyone at the same price. That supplier relationship was everything. You don’t find those easily and you definitely don’t share them.

One morning three identical listings appeared under his product. Same photos, same specs. Priced 15% lower. He spent two days trying to figure out how they’d found his manufacturer. Reverse image search? Nope. Someone followed him at a trade show? Nope.

A friend in the industry asked if he’d ever checked his product photos for EXIF data.

The manufacturer had taken a quick phone photo of the final sample and sent it over WhatsApp. Looked fine, so he uploaded it to the listing. What he didn’t know: that photo still had the GPS coordinates from the phone’s camera baked into the file.

Right-click. Upload to a free EXIF viewer. Copy the coordinates. Paste into Google Maps. You’re looking at the factory entrance — and if the manufacturer has claimed their Google Business profile, their name, phone number, and hours are sitting right there.

It takes under a minute. No scraping, no hacking, no insider connections. Just right-click and two free tools anyone can find on Google.

The GPS tag gets all the attention, but EXIF data leaks in other ways. The phone model tells you whether you’re dealing with a small workshop or a full-scale operation. The timestamp gives away the timezone and working hours. Sometimes the editing software they used is still in the metadata. One tag alone doesn’t mean much, but someone who knows what they’re looking at can assemble a useful picture from several of them.

I tell people to add one step to their listing workflow: before any supplier photo goes near Amazon or Shopify, run it through a metadata scrubber. I built exifaudit.com because I was tired of explaining this to people who’d nod and then forget. It’s free. No account, no pricing page, no email sequence. Upload your image, see what data is attached, scrub it clean, download the safe version. The photo looks exactly the same. The hidden map to your supplier doesn’t exist anymore.

Thirty seconds. That’s all it takes. Or don’t, and hope nobody checks.