This should never be left enabled on a deployed website.But sometime we forgot to disable There are actually two aspects of disabling it:
1. Turning off profiling under System (menu) -> Configuration (menu item) -> Developer (tab on left) -> Debug (accordion section)
2. Make sure all calls to Varien_Profiler::enable(); are commented out in your index.php file.