[rsingel]

Path said it was sending over HTTPS, but storing in plaintext - protected by a firewall. No server-side encryption.

[chairface]

That's still not like sending a letter without an envelope.