My main concern in using sites like this is that they'll leak my banking credentials. Mint uses Intuit's service for communicating with financial institutions, which is also used for Quickbooks and TurboTax. Credentials are encrypted and housed in a datacenter owned by Intuit. The Mint application only ever stores a token representing the account and uses the service to pull transactions from a read-only service. While I'm still uneasy about this setup, the isolation of the systems combined with the scale and the resources devoted to keeping it secure provide some piece of mind.

Can you talk about the measures that you use to protect banking credentials so that I might feel similarly safe about giving them to your service?