But, at least if it's implemented correctly and not maliciously, the app doesn't ever see your password.