So you have a phone, and it’s great. And you take the best pictures. Amazing! Photos are so much fun to take, and look at, and share. However, knowing where all your photos are stored, how to delete them, and how to keep them safe is much harder.

It’s possible you’ve taken a bad or embarrassing selfie, a photo you thought you’d share, but decided against, or even a photo that could put you in danger. How can you be sure that those photos are really, truly deleted?

We asked some of Thorn’s engineers to boil down security essentials that help keep your photos safe. And it comes down to three things:

  1. Always use strong passwords to keep the devices storing your photos safe
  2. Know where to permanently delete your photos
  3. Know which apps can access your photos

What makes for a strong password?

The best way to keep your information and photos safe is by creating a strong password. The easier a password is for you to remember, the easier it is for a hacker to guess. 

Therefore, you should choose passwords that are difficult to memorize — passwords that are long, use lots of symbols, and aren’t based on words at all. You should also use a different password for every website or app, in order to limit the damage in case one of the services you used experiences a security breach.

But if you do all that, how can you possibly remember all those passwords? Well, unless you’re Sherlock Holmes, you can’t. But a password manager can! Password managers (we recommend 1Password or Apple’s built-in password generating/storing functionality) can generate strong, unique passwords for every site you visit or app you install. They can also remember all these passwords for you — keeping those passwords safe and only requiring you to memorize one password.

Don’t make things easy on hackers. Your data is private and important!

What happens when I delete a photo or video from my iPhone?

There are several possibilities:

If you have iCloud Photo Library enabled, deleted photos are placed in the “Recently Deleted” album (both on your phone and in iCloud), where they remain for 30 days. After that, they are permanently deleted from both your phone and your iCloud account. To delete photos before the 30-day time period is up, delete them from the “Recently Deleted” album.

If you do not have iCloud Photo Library enabled, the photo is available on your phone in the “Recently Deleted” album for 30 days. You can delete it permanently from that album. The photo will never be in iCloud Photo Library in this case.

If you have added a photo to your “My Photo Stream”, you will need to go to that photo stream and delete it from there.

Backups of your phone, either via iTunes or iCloud, may still include deleted photos. If you are using iTunes to backup your phone, we recommend enabling encrypted backups. If you are backing up via iCloud, encryption is enabled automatically; however, anyone with your iCloud password could recover your iCloud backups and (potentially) your photos. So, keep your iCloud password safe!

In addition to the above, any apps that you have given permission to access your photos may have stored copies of your photos in the cloud. Two common apps that do this are Google Photos and Dropbox, but there are many others. If you use this type of app for photo management, be sure to delete the photo from that app as well (and review their data retention policy).

What happens when I delete a photo or video from my Android phone?

This is more complicated, since different versions of Android use different photo services and carriers can include their own software with the phone. The most common option on new phones is Google Photos.

If you use Google Photos: your deleted photo will remain on your device and in the cloud in a trash folder for 60 days (by default) before being deleted. After that time period, the photo will be deleted from both your device and the cloud. Get more information here.

If you have a Samsung phone, it’s possible that Samsung Cloud Sync is enabled. According to Samsung’s support page, deleting a photo from the Gallery app will also delete it from Samsung Cloud (although they don’t specify a retention period).

As with iPhone, other apps may have access to your photos and thus may be storing them in their own clouds. Think carefully before installing an app that can access your photos.

Are photos and videos on my phone discoverable if someone is nearby?

On iPhone: no. You would need to explicitly share a photo or video with someone, either via an app or the built-in AirDrop feature.

On Android: no. Samsung phones have a feature called “S Beam” that works similarly to AirDrop, but you would also need to explicitly share a photo or video with someone.

Apps that have permission to view your photos can essentially do anything they want with them, including share them with nearby phones. 

Periodically do a phone health check! On Apple’s iOS, navigating to Settings > Privacy & Security > Photos will list which apps have requested permission to view your photos, and whether it’s all photos or only a subset. Setting the permission to “None” for apps you no longer use ensures that your photos are not accessed without your permission.

 Always think carefully before installing an app that can access your photos.

We hope that with these tips, you’ll feel more confident in keeping your photos safe, in your control, and out of the hands of bad actors. 

Subscribe to Thorn updates.