Hacker News Reader

Mint is logging in on your behalf, unless you have a different service than I do.

Yep, the OBP approach is to use OAuth (currently 1.0a) so the App doesn't have to see the credentials.