I assume they store your session state/token for whatever SaaS it needs to work with but not the creds.