Google Photos, Apple Photos with iCloud, and Google Drive are excellent at the job they were built for: backing up your entire library, syncing it across devices, and making it easy to share. That job is fundamentally about openness — surfacing photos in search, suggesting who to share them with, syncing them to every device you own. None of that is a flaw. It's just the wrong design for the specific subset of photos you actually want kept private.
The mismatch, concretely
General-purpose cloud photo storage optimizes for findability and reach: photos sync automatically to your other devices, show up in shared albums, get indexed by face and location for search, and are visible the moment someone else is signed into a shared family plan or picks up an unlocked companion device. Every one of those features is a convenience win for your regular photo library and a liability for the specific photos you'd rather keep separate — an ID scan, a medical photo, an intimate photo, anything you took for one purpose and don't want resurfacing in a "memories" collage or a shared album by accident.
Where this actually goes wrong
- Shared family plans. iCloud and Google accounts are frequently shared across a household. A private photo synced under a shared plan can be more exposed, not less.
- Auto-generated highlights. "Memories" and similar features actively resurface old photos on other signed-in devices — including ones you didn't intend to see them again.
- No dedicated access control. Once you're signed into Google Photos or the Photos app, everything is visible. There's no separate PIN or Face ID gate for a specific subset of your library.
- Search and indexing. Faces, locations, and even object recognition make private photos easier to stumble onto by search, not harder.
What these services are genuinely good at
To be fair to them: for your general photo library — vacations, everyday life, things you're happy to have synced and searchable — Google Photos and iCloud are good, reliable defaults. The point of this article isn't "don't use them." It's that they were never designed to be a privacy tool for a specific, sensitive subset of your photos, and using them as one is where people get burned.
What to use instead for the photos that need to stay private
The fix is separation: keep your general library where it is, and move the photos you actually want private into a dedicated vault app with its own access control — PIN and Face ID or Touch ID — that's independent of your camera roll, shared albums, and recents. That's the model HidePal uses: photos and videos in the vault back up in high quality to a private, per-account store, locked behind PIN and Face ID or Touch ID, and nothing in it appears in your camera roll or shared albums. It's honest about what it isn't, too — see our note on why the built-in Hidden album isn't a substitute for a real vault.
Separate the photos you want private from your everyday synced library.
Download on theApp StoreThe short version: general cloud photo storage is built for reach, a private photo vault is built for restriction. Use each one for what it's actually designed to do.