A tenant takes 60 photos of an empty apartment on move-in day. Eleven months later the landlord keeps the entire deposit for "damage." The tenant opens the camera roll and expects the argument to be over.

It is not over. The photos are questioned, and the discussion stops being about the apartment and starts being about the files.

The instinct is to say the photos prove it. They often do not, for a reason that has nothing to do with honesty.

EXIF is a text field, not a seal

A JPEG carries its capture time and GPS coordinates in EXIF metadata. That metadata is trivially editable — a cheap utility app rewrites it in seconds. So when one side says "these photos are from a different unit, taken on a different date," a judge is not being unreasonable to ask what independent reason there is to believe the timestamp.

This is the part most advice skips. "Take dated photos" assumes the date is evidence. It is only evidence if something outside your own device also knows the date.

Two narrower problems compound it:

  • EXIF has GPS, not an address. Coordinates do not resolve to unit 4B in a 200-unit building.
  • The camera roll is single-party. Nothing in it was ever acknowledged by anyone else.

What actually closes the gap

Three things, in increasing order of strength.

1. An external timestamp. Email the originals to yourself and a second party on the day you take them. The mail server's receipt time is not under your control. It is weak but it is independent, and it costs nothing.

2. A hash recorded outside the file. Compute a SHA-256 of each photo and record that hash somewhere with its own date — a repo commit, a notarized email, a signed document. Anyone can later recompute the hash from your copy and compare. If a single pixel changed, the hash differs. Note carefully what this proves: it proves the file existed in that exact form on that date. It does not prove who caused any damage. Used as supporting evidence rather than a magic bullet, it holds up well.

3. A third-party acknowledgment. A walkthrough with the landlord, photos printed or attached, and a one-line signed statement that these photos accurately show the condition on that date. This is the strongest of the three because the other party participated. Most reasonable landlords will sign, since it protects their investment too.

The design constraint this implies for software

The interesting engineering problem is not "store photos in an app." It is that the evidence chain has to be built at the moment of capture, not reconstructed later.

That pushes a few decisions:

  • Hash at capture, not at export. If the hash is computed when you generate the report, you have proven nothing — the file could have changed between capture and export. The digest has to be taken before the file leaves the camera pipeline.
  • The record needs an address field separate from GPS. Address is what ties evidence to a specific unit; GPS is what ties it to a building.
  • Export must be reproducible. A PDF that renders differently each time it is generated cannot be checked against an earlier copy. Deterministic output with a stable hash is what makes a report comparable.
  • Local-first, because the urgent case is offline. The moment you need this is move-out day with no wifi and a landlord waiting.

The tradeoff worth stating plainly

A local-only tool has a real cost: lose the phone before you export, and you lose the evidence. Any honest design in this space has to say that out loud rather than claim the cloud solves it — cloud storage introduces its own question, which is whose clock the server timestamp came from.

There is no version of this that eliminates the dispute. The goal is narrower and more achievable: make the file itself carry enough independent corroboration that the argument moves back to the condition of the apartment, where it belongs.

Disclosure: DepositPacket: Move-Out Proof is built by TAOAPEX LTD, the company that publishes this post. It is a documentation tool, not legal advice, and it cannot guarantee any outcome in a deposit dispute. California-specific rules around deposit itemization are worth reading directly — the burden of accounting generally sits with the landlord, and deadlines vary by state.