The most popular Android apps across every category are continuously monitored for credentials that are still live, and the developer contacts on file for each affected app are notified privately. Here you can see what kinds of secrets show up and where, in aggregate.