pull down to refresh

This is a simple concept: WTF would you trust a third party with any kind of sensitive password?