Passing a password, token, or secret to Log.d/Log.e/Log.i leaks credentials into device logs.
Never log secrets; redact sensitive fields and disable verbose logging in release builds.