1. Seems like a very reasonable objection to me. I’d guess that most of us Immich users are using it in the first place because it improves the privacy of our photos, and a third party seeing our location data certainly undermines that.
2. I would have complained had I noticed, so you might be the first one to notice. Immich’s userbase isn’t huge right now, it’s definitely possible.
3. Featurewise, I’d like: a) a clearly documented way to disable map data leaving my server; b) a set of well-integrated choices (maybe even just two, as long as one of them is something like openstreetmap); c) the current configurability to be well documented.
4. I’d love it if all such outbound data streams are also documented. Many security and privacy-focused products give you a “quiet” mode of some kind, where you can turn off everything that sends your data somewhere else. It’s a requirement in many enterprise installations.

The problem here, linguistically, is that any phrase which means this will take on the meaning of falsehood automatically, over time. It’s the same way that any respectable word that means “has a disability” eventually comes to be an insult and then a slur.

If you want to say something like that, the word “putative” is still pretty unfettered by negative connotations, but only because few people use it. If it were in common use, it would follow the same path as “so-called”. A more reliable approach in the long-term is to say what you mean using more words instead of fewer:

She could trust him more than any of her friends; although she wasn’t sure those people were really her friends, it remained to be seen.

It’s actually the length and awkwardness of the sentence structure that makes it resistant to misinterpretation.