It seems a little ironic that, in an attempt to encourage financial responsibility in the area of debt management, they are effectively asking people to hand their financial information to an unknown party. I got a letter the other day claiming that I'd won the Spanish lottery that (if it were not a classic scam, if it were not postmarked from Texas, and if not for the YC stamp on ReadyForZero) would have been only a little less credible. I mean, they're even hosting the McAfee, TRUSTe, and VeriSign stamps on their server.
Let me be clear: I do not think this is a scam. I just think there are some mixed signals here. You should be very up front about exactly what's done with the user's information and how it's secured, and give them a reason to think you're for real. An endorsement from someone well-known would do wonders.
Some of your potential customers are likely in debt because they've fallen for scams in the past. Don't let them be scared off.