Photos You Don't Want in iCloud: How Do You Keep Them Off?

The situation

You photograph something private, such as a medical letter or an ID, and you do not want it copied to cloud storage or to your other devices.

Apple says that with iCloud Photos on, all the photos and videos in your library are stored in iCloud, and edits and removals appear on all your devices. So the question is not only where a photo is. It is also where it goes next.

Check whether iCloud Photos is on

1. Open the setting

   Choose Apple menu > System Settings, click your name, then click iCloud. Under Saved to iCloud, click Photos.

2. Read the switch

   If Sync this Mac is on, this Mac uploads its library and shows the library from your other devices. You can also see the setting in Photos > Settings > iCloud, where Apple describes the iCloud Photos checkbox.

3. Look at your other devices too

   Syncing is per device. A photo can reach iCloud from an iPhone or iPad even if this Mac is off the service.

Four choices, and what each does and costs

The Hidden album does not keep photos out

Apple says the Hidden album is locked by default on macOS Ventura and later, and that photos you hide on one device are hidden on your other devices too. That means hidden photos sync. Hiding removes a picture from the main grid. It does not remove it from iCloud. See the Hidden album guide and hide photos on a Mac.

What Advanced Data Protection changes

Apple says Photos is encrypted in transit and on the server by default, with Apple holding the keys. Advanced Data Protection is an optional setting that adds end-to-end encryption to Photos and other iCloud data, so only your trusted devices hold the keys. On a Mac, open System Settings, click your name, click iCloud, then Advanced Data Protection, then Turn On.

Apple lists requirements: two-factor authentication, up-to-date software on every signed-in device and at least one recovery contact or recovery key. Apple cannot help you recover end-to-end encrypted data, and some Photos metadata stays under standard protection. It changes who can read the photos. It does not keep them out of iCloud. See the ADP guide.

Remove what already uploaded

1. Copy the private pictures into an encrypted container first. Check that you can open them.
2. Delete the originals in Photos. Apple says deleted items go to Recently Deleted and stay there for 30 days. Open Recently Deleted in the sidebar and delete the items there too, or click Delete All.
3. Remember that deletions sync. Apple says removals appear on all devices with iCloud Photos on, so a deletion on one device removes the picture from the others.
4. Check old backups. A Time Machine backup made earlier still holds the photo. See encrypting a Time Machine backup.
5. Strip location data from any picture you keep or share with the metadata remover.

Where a vault fits

Hidden Folder keeps files in its own encrypted store, not in your Photos library. Its optional encrypted backup is planned to upload ciphertext only, and the spec includes a setting to switch it off. The planned secure camera saves a capture straight into the vault and never into Photos. That covers new pictures. It does not remove pictures that Photos already uploaded, and it does not control the Camera app on your iPhone.