In its settlement with the FTC announced today, Path closed the door on one privacy controversy, but it seems the company may soon find itself embroiled in yet another. According to security researcher Jeffrey Paul, Path will geotag your posts on the social network even after you've disabled location services for the app. How is it accomplishing this? By pulling EXIF data — which contains GPS coordinates — from any images you've attached via the iOS camera roll, Path is able to uncover the location where each shot was taken.

We're not sure why the company would blatantly disregard user preferences in this way, so if Paul is correct it's most likely some sort of oversight on the part of Path's programmers. Thus far we've been unable to replicate the issue, but have reached out to Path for clarification. In the meantime, you can work around this privacy hole either by refraining from attaching photos to Path posts, or by disabling your iPhone's camera from geotagging photos in the first place.

Update: We were able to replicate the geotagging issue when attaching photos taken with Apple's Camera app. Path has confirmed the bug in a response posted directly to Jeffrey Paul's blog: