Update "automatically get current location" setting text to inform that files will be geotagged with it

[misaochan]

Based on the discussion at https://commons.wikimedia.org/wiki/Commons:Village_pump#Warning!_Mobile_uploads_are_getting_the_wrong_location! , we should make this more explicit to users.

[VojtechDostal]

It's a surprise to me that the coordinates can be assigned based on uploader's current position rather than position at the time of taking the picture. Isn't that mostly useless? :-) That position is usually completely different.

[misaochan]

I think the rationale was that people sometimes upload photos on the spot (e.g. via camera), forget to enable geotagging on their camera, and if they choose to enable this setting, they will still get the other benefits of geotagging (e.g. category suggestions) based on their current position. @nicolas-raoul can perhaps elaborate on this? Indeed, this option might have less relevance now than when it was implemented (for my own Outreachy project), so we may want to reconsider having it at all?

The user has escalated this to the Commons administrative noticeboard - https://commons.wikimedia.org/wiki/Commons:Administrators%27_noticeboard#Ongoing_privacy_incident_involving_the_Commons_Mobile_App despite my response to him. I'm honestly not sure if a response of the scale that he is suggesting is warranted, since the number of users affected would be relatively small - they would need to have manually enabled the setting, and then manually enabled location permissions with each new install, and uploaded files with no exif location. Granted we should have made the flavour text more explicit, but personally if I were to manually enable all of that in an image uploading app, I would not be very surprised that images would be geotagged. There are far fewer warnings/ manual enabling required to have an image geotagged with its exif data, after all, including on the upload wizard. The solution he is proposing might remove geotags from the uploads of users who DID intend to enable the setting for this purpose.

I'm not sure if my opinions are off base though. Would anyone mind looking through the conversation and providing input?

[whym]

(I might comment at the VP later, but I think technical questions should be sorted out here first.)

Can we quantify 'relatively small'? There are 28,590 files contributed via the app with the location template on their file pages. I assume among them, the scope would be files without latitude/longitude embedded into EXIF?

Manually I struggled to find such a file among the 28,590 files (which probably means the number is indeed small) - I would have to write a script.

[misaochan]

@whym Yeah, unfortunately there is no way to tell what the exact number is unless we write a script (and even then it doesn't distinguish between files where the uploader intentionally used our feature for this purpose, as opposed to those who don't actually desire it despite having enabled that setting). I'm making a guess based on what I see manually, as well as the fact that 3 factors (that I mentioned above) need to all be true to allow for it to happen, and then among files with all 3 factors being true, the geotagging needs to be unintentional.

Can we quantify 'relatively small'? There are 28,590 files contributed via the app with the location template on their file pages. I assume among them, the scope would be files without latitude/longitude embedded into EXIF?

Right, except for the unintentional vs intentional bit. I'm not sure if it's possible to know which ones are intentional and which ones unintentional, without reaching out to them.

[whym]

I'm working on a script to do that. From preliminary results, it appears like roughly 10% of the 28,590 images fall into the definition (except for the the unintentional vs intentional bit, as you pointed out). I think I can get the full number in a day or two.

Another technical point: is the settings screen the only entry point to enable the feature? Do/did we ask it in Share or Categorization somehow?

EDIT: the initial results were wrong - the applicable files are actually far less than that. I'll give an update later.

[nicolas-raoul]

This option is off by default, right?
I just wiped the app's data using Android's Settings, and the setting is now off.
If it is the case, I would say we don't have to do more than make sure the option clearly states what it is for.

[nicolas-raoul]

I might be confusing things. My comment above was about "Automatically get current location - Retrieve current location to offer category suggestions if image is not geotagged", I am not sure whether it is related or not.

• Are coordinates at time of upload really added to the image as its coordinates?
• If yes, is it enabled by default after installing the app?

[whym]

As far as I can see:

• Coordinates were added using the {{Location}} template into the file page, not to the embedded EXIF.
• It is disabled by default. (and if the camera adds coordinates to photos, it has no effect.

Relevant code:

apps-android-commons/app/src/main/java/fr/free/nrw/commons/upload/GPSExtractor.java

Lines 123 to 146 in 8dfe9d6

	if (exif == null || exif.getAttribute(ExifInterface.TAG_GPS_LATITUDE) == null) {
	if (useGPS) {
	registerLocationManager();
	imageCoordsExists = false;
	Timber.d("EXIF data has no location info");
	//Check what user's preference is for automatic location detection
	boolean gpsPrefEnabled = gpsPreferenceEnabled();
	//Check that currentLatitude and currentLongitude have been
	// explicitly set by MyLocationListener
	// and do not default to (0.0,0.0)
	if (gpsPrefEnabled && currentLatitude != null && currentLongitude != null) {
	Timber.d("Current location values: Lat = %f Long = %f",
	currentLatitude, currentLongitude);
	return String.valueOf(currentLatitude) + "|" + String.valueOf(currentLongitude);
	} else {
	// No coords found
	return null;
	}
	} else {
	return null;
	}

[misaochan]

@whym Thanks for looking into this!

Another technical point: is the settings screen the only entry point to enable the feature? Do/did we ask it in Share or Categorization somehow?

Yes, AFAIK the settings screen is the only entry point to enable the feature.

As far as I can see: Coordinates were added using the {{Location}} template into the file page, not to the embedded EXIF. It is disabled by default. (and if the camera adds coordinates to photos, it has no effect.

Yup, that is my understanding too.

Are coordinates at time of upload really added to the image as its coordinates?
If yes, is it enabled by default after installing the app?

@nicolas-raoul Yes they are added if the user has manually enabled that setting. It is disabled by default.

We should definitely change the flavour text to make it more explicit, and I will do that ASAP next week. However, the user in the Commons: administrator noticeboard is proposing that a bot be run to remove all location tags from such scenarios. I personally feel that this would be detrimental to the people who actually enabled that setting hoping that it would do that. But I guess it wouldn't be too bad either way.

[nicolas-raoul]

If the setting has always been "Automatically get current location - Retrieve current location to offer category suggestions if image is not geotagged", then I have to agree that adding these coordinates to the image itself is more than described. So removing these locations sounds to me like the best thing to do for now.

I am sure we can distinguish whether the coordinates template was added by the app or manually via the web interface, thanks to edit tags.

[whym]

According to my script's final results, there were 939 applicable files (less than 4% of the geotagged files) as of last Friday. I offered to redact location information from them at the Administrators noticeboard.

What message, if any, should we send to the affected users (probably to their talk pages)? The right timing would be after the release of the fixed app anyway, though.

[misaochan]

Thanks so much @whym ! I guess we could tell them that we apologize for an unclear description of the "Automatically get current location" setting, as we just found out that we neglected to mention that enabling the setting would also add those coordinates to the location template of the uploaded image? And let them know that due to this, in order to protect users' privacy we have to redact location information from files that match the criteria you mentioned.

Re: the fixed app, I'm not sure whether we should just bundle the change into 2.8 (beta version coming out next week), or do we need to push 2.7.2 directly into production with just that one change? The first major release always takes a while in beta, so it would be 2-3 weeks away from production most likely. So 2.7.2 will be quicker, however that does mean that everyone will have to download an updated APK with just that one change.

[nicolas-raoul]

I would say that pushing an APK to all users with no real changes is OK if it is a security correction.