Private photo storage: what it really means
Almost every photo service calls itself private. The word usually means that other users can't see your pictures. It rarely means that the company storing them can't. Here is how to tell the difference, and what real privacy for a photo library looks like.
Who can see your photos?
When you upload a photo to a cloud service, a copy lives on that company's servers. Whether anyone there can look at it depends on how the service is built:
- Other people can only see what you share. Every reputable service gets this part right.
- The company can usually read your library, because it holds the keys that unlock it. That access is what lets it build search, face grouping and "memories" on its own servers.
- Automated systems such as AI models, content scanners and recommendation engines often process your photos on the company's servers as part of normal operation.
- Anyone who gets into the company's systems, whether through a breach, a legal request or an insider, could reach the same data.
Some services offer extra encryption options. Before relying on one, check exactly who holds the keys and which features still work with it switched on.
The three questions to ask
- Where are the files physically stored? On your hardware, or on someone else's?
- Who holds the encryption keys? If the provider holds them, the provider can read your library.
- Where does the "smart" processing happen? Face recognition, search and captions need to look at your photos. If that runs on a company's servers, your photos go there to be analysed.
What encryption at rest does, and doesn't do
Encryption at rest means your files are stored scrambled on the disk. If someone pulls the drive out and plugs it into another computer, they see noise instead of photos. It protects you when hardware is lost, stolen or thrown away.
It does not protect you from whoever holds the key. On a cloud service, that is usually the company. On your own server, it can be you alone.
Keeping your library in your own hands
The most private place for a photo library is hardware you own, in your own home, with the keys held only by you. This is what people mean by a self-hosted photo library. Nothing has to leave the house unless you send it somewhere.
Self-hosting used to mean giving up the conveniences of the cloud: automatic backup from your phone, fast search, faces and captions. That trade-off is shrinking, because the AI that powers those features can now run on a home server. See private AI for photos and videos.
Where Top Drawer fits
Top Drawer is a photo and video library built around these three answers. Your files are stored on hardware you own. They are encrypted at rest, with a key only you hold. The AI runs on your own server or computer, or even a virtual server at a provider you choose and trust, so your library is never uploaded to us or to an AI company.