How to Share Medical Photos Privately (Telehealth, Insurance, and Second Opinions)

The first time I had to share a medical photo (in my case: a weird skin reaction) I did what most people do: I snapped a picture on my phone and almost sent it in the fastest app I had open.

Then I hesitated—because “medical photo” isn’t just an image. It can reveal your identity (tattoos, jewelry, face), your location (EXIF), and details you may not want living forever in a random group chat.

This guide is a practical, non-paranoid workflow for sharing medical photos privately (telehealth, second opinions, dermatology, insurance, caregiving) while keeping control: what to crop, how to strip metadata, and how to use expiring/password-protected links.

Why medical photos are uniquely sensitive (even if they don’t show your face)

Medical images often carry more identifying info than you think. Risks tend to fall into four buckets:

• Identity clues: face, birthmarks, tattoos, jewelry, distinctive backgrounds, clinic paperwork.
• Metadata: phone photos can include GPS coordinates, timestamps, device model, and other EXIF fields.
• Context leaks: chat apps create backups, threads, forwards, and “forever search.”
• Secondary exposure: family group chats, shared iCloud/ Google Photos albums, or someone else’s device gets lost.

The goal isn’t perfection. It’s to avoid the most common “oops” outcomes: permanent link, wrong recipient, or metadata you didn’t realize you shared.

Before you share: a 60-second privacy checklist

Here’s the checklist I use when the photo is even slightly sensitive:

What to crop or blur in medical photos (a practical redact list)

If you’re unsure, assume the recipient only needs the medical area and a sense of scale.

• Face & eyes: even partial facial features can make a photo identifiable.
• Tattoos & unique marks: if they’re not relevant, crop/blur them.
• Documents: appointment letters, insurance cards, prescriptions, lab printouts.
• Labels: pill bottles often include name, address, and pharmacy.
• Reflections: mirrors and glossy surfaces can capture your face.

If you need a scale reference, consider adding a plain object (coin, ruler) after you crop—so the background stays minimal.

EXIF metadata: how location leaks happen (and how to avoid them)

Many phones embed EXIF metadata in photos. Some platforms remove it on upload, some don’t, and some keep it in backups.

My rule: if the photo was taken at home (or a sensitive location), assume it has GPS data and strip it.

Best sharing methods (ranked): what I’d actually use

Different situations need different tradeoffs. Here’s a practical ranking:

1. Expiring link + optional password (recommended): gives you revocation and a “time limit,” which is what most people want.
2. Encrypted 1:1 messaging (Signal/iMessage): fine for a trusted clinician/caregiver, but forwarding and backups still exist.
3. Email attachment: convenient, but it tends to become permanent and searchable. Use only if necessary.
4. Group chats: last resort. Too many devices, backups, and accidental forwards.

Suggested expiry times (so you don’t create a permanent leak)

If you catch yourself thinking “I’ll just leave it,” that’s your sign to set a 7-day expiry.

Copy/paste message templates (doctor, caregiver, insurance)

Sending the right context reduces back-and-forth and minimizes how many images you need to share.

FAQ: common questions about sharing medical photos privately

My default recommendation

If you want a simple rule that works 90% of the time: crop hard, strip metadata, and share via an expiring link you can revoke.

Private doesn’t have to mean complicated. It just means you keep control.