Right now, we do a fair amount of logging.debug. Specifically when validating schemas, if an error is found, this means that if the entire error object is logged, it will include the full text of the offending JSON tag(s). If this includes information taken from the user's uploaded data, this could be a privacy leak. However,
PROPOSED SOLUTION
After talking to @JRegimbal, it might make sense to create a new log level below debug, e.g. logging.pii(), that is only enabled on testing servers without end-user data, and disabled on production servers. This would entail: