develop icon indicating copy to clipboard operation
develop copied to clipboard

Improve documentation on what `send_default_pii` init option should do

Open rhcarvalho opened this issue 4 years ago • 0 comments

SDKs shall not send Personally Identifiable Information by default, requiring a configuration opt-in when initializing the SDK.

PII includes, but is not limited to the entire user object, auth headers, IP addresses, etc.

We document the general expectation in https://develop.sentry.dev/sdk/data-handling/#sensitive-data, but SDK developers need to inspect existing SDKs to compare implementations on what shall or shall not be covered by the send_default_pii option.


I've also looked at these locations where more information or links could help discover the existing docs on PII:

  • https://develop.sentry.dev/sdk/features/
  • https://develop.sentry.dev/sdk/unified-api/#options

rhcarvalho avatar Nov 19 '21 16:11 rhcarvalho