Hacker News Reader

Does this service require me to give up my private key for a given API? Seems like a huge security risk to me.

It beats putting your private keys in client-side code (JS-only apps being those which this solution seems to be built for).