Guidance should be added to remove sensitive information from logs and tools which rely on logging, i.e. Sentry. Sensitive parameters can be handled via config/initializers/filter_parameter_logging.rb in Rails apps. E.g:
Rails.application.config.filter_parameters += [:email]