[cliff]

You're still sending the password I entered back to me in an email in plaintext, even if you're not keeping it.

This is considered horrible practice.

I was excited about your product until I received an email with my password in it.. it just killed my enthusiasm. At some point I'll look back, but for a site that stores financial data...kinda scary.