diff --git a/rust/strawcore/src/channel.rs b/rust/strawcore/src/channel.rs
index 67d48b8a9..3434905e5 100644
--- a/rust/strawcore/src/channel.rs
+++ b/rust/strawcore/src/channel.rs
@@ -23,7 +23,7 @@ pub struct ChannelInfo {
 
 #[uniffi::export(async_runtime = "tokio")]
 pub async fn channel_info(input: String) -> Result<ChannelInfo, StrawcoreError> {
-    log::info!("strawcore::channel_info input={}", input);
+    log::info!("strawcore::channel_info input_len={}", input.len());
     let identifier = resolve_channel_identifier(&input)?;
     let core = tokio::task::spawn_blocking(move || core_channel_info(identifier))
         .await
diff --git a/rust/strawcore/src/search.rs b/rust/strawcore/src/search.rs
index b85b7ce7f..0a693ff61 100644
--- a/rust/strawcore/src/search.rs
+++ b/rust/strawcore/src/search.rs
@@ -54,7 +54,12 @@ pub(crate) fn from_core(item: StreamInfoItem) -> SearchItem {
 
 #[uniffi::export(async_runtime = "tokio")]
 pub async fn search(query: String) -> Result<Vec<SearchItem>, StrawcoreError> {
-    log::info!("strawcore::search query={}", query);
+    // Don't log the query itself — searches are PII (sometimes
+    // names, sometimes embarrassing) and android_logger emits at
+    // info-level in release builds, which means they'd ride the
+    // Settings → Export Logs path straight into a user's chat. Log
+    // shape, not content. vc=36 audit CVE HIGH-2.
+    log::info!("strawcore::search query_len={}", query.len());
     let result = tokio::task::spawn_blocking(move || {
         search_extractor::search(&query, SearchFilter::Videos)
     })
diff --git a/rust/strawcore/src/stream.rs b/rust/strawcore/src/stream.rs
index 7a4ce6839..73da83e58 100644
--- a/rust/strawcore/src/stream.rs
+++ b/rust/strawcore/src/stream.rs
@@ -57,7 +57,7 @@ pub struct AudioStreamItem {
 
 #[uniffi::export(async_runtime = "tokio")]
 pub async fn stream_info(input: String) -> Result<StreamInfo, StrawcoreError> {
-    log::info!("strawcore::stream_info input={}", input);
+    log::info!("strawcore::stream_info input_len={}", input.len());
     let video_id = resolve_video_id(&input)?;
     let video_id_for_call = video_id.clone();
     let core = tokio::task::spawn_blocking(move || core_stream_info(&video_id_for_call))