@Andreas Nurbo - I assume most people figured the phone application itself was storing the password, not the phone application.

If you are going to store passwords, then it should be made upfront with a giant warning sign when you sign up. I don't know if that is the case here or not.