This is interesting, but how do you deal with the trust issue, how can I trust your application, that you are not stealing my credentials?
Right now, we’re undergoing the CASA Tier 2 security assessment for our desktop application. This process, required by Google for publishing our Gmail and Google Calendar integrations, which reassures that we are not transferring data to our servers and storing it securely on your local machine. We also planned to obtain SOC 2 after we validate the demand for the tool.
We also encourage our users to inspect the network traffic from our application to verify this for themselves.