I was adding logging to my application. And I realized that there are times when I need to debug my sql statements and logging them (at debug logging level of course) would make debugging very easy. I am kind of confused because some times logging statements can contain personal information like contact details, names and such. (No card or bank account details)
The minimum logging level at production would be info which means debug statements would be basically no-op. But I was wondering that can it be used as a security vulnerability?