I believe they use OAuth for Gmail and Google Apps, much like Mailbox.