If you strip the EXIF data prior to sending them photos, and are cautious with your IP address, not sure what else they'd be collecting that could be problematic...