I would not trust an "open source" app that is just a web app.