To my understanding, they only keep encrypted copies of your password. as long as they don't have your password they can't access your data even if they had it.