1. A method comprising: receiving at a network server first information about a first device, the first information comprising a log recorded by the first device at a recording time interval of a plurality of locations where the first device was present and a respective time that the first device was present at each of the plurality of locations, the first information further comprising a time range and a distance range; searching, by the network server, for images having location metadata within the distance range of each of the plurality of locations in the log and time metadata within the time range of the respective times; identifying at the network server candidate image associated with a second device other than the first device, the candidate image associated with second information comprising data corresponding to a location at which the candidate image was captured and a time at which the candidate image was captured, the location at which the candidate image was captured being within the distance range of one of the plurality of locations of the first device and the time at which the candidate image was captured being within the time range of the respective time at which the first device was at the one of the plurality of locations; sending by the network server to a third device other than the first device or the second device a lower resolution version of the candidate image associated with the second information for approval; receiving an approval of the lower resolution version of the candidate image; sending a full resolution version of the candidate image that was approved to the third device in response to the approval.