In most cases, we never see the credentials. AOL, Google, Yahoo and Microsoft all use the OAuth 2.0 delegated authentication frameworks that ensures that their users never have to give their credentials away to third parties like us. For the other address book sources, we never save their credentials to disk and we wipe it from our server’s memory after a few minutes.