Why do these documents sync to mobile?

If these image documents are created via the mobile app, they will be available for sync to other authorized clients. The import filtering is for documents created on Couchbase Server side. If you don’t want any user other than the one that created it to have access to it, then you should have such private documents in user specific private channels. You can learn more about shared bucket access and import processing here.