Hey @captaincanary, project is opensource so anyone can monitor what is happening there or compile and build app locally if they have some technical knowledge. As for private keys and passwords, they are all stored on your device locally and never leaves your device, all transactions are generated locally and broadcasted to the websocket of your choice. You can enable PIN code security which gives extra layer of security.... Side note: for blockchain every app is a third party :)