This really makes little sense. The service was designed so that the data was encrypted.
He could just let people download their data and decrypt it locally. Instead the site is prompting you for a password which it could freely capture.
He could just let people download their data and decrypt it locally. Instead the site is prompting you for a password which it could freely capture.