[tobbebex]

I used to work with a medical software where we turned off logging completely in production, to mitigate the risk of accidentally log patient information.

We needed to log that kind of data during development and just tagging what messages were sensitive would have been too error prone, so we couldnt reliably have any logs once we went live.

We did however have a special crash handler that logged the exception type and callstack, but not even the exception message could touch the harddrive.