Just to herd a warning then from a Dev perspective: you want to remove them before interacting, not just opening.
I can send files without ever opening them and the sharing would keep the meta data if you'd not open the files manually with the cleanup tool.
Personally I've had a camera app a while back that I could configure which meta data it saved but I simply stopped sharing photos on social media and so this become s non issue for me :)
There's a xkcd for that of course! Linking directly to the explain as it has more info but the important thing is: password guidelines tricked humans into thinking in a machine way about safe passwords but long pass phrases are more secure from an entropy point of view and way easier to remember!
https://www.explainxkcd.com/wiki/index.php/936:_Password_Strength