Back in 2014 the lichess app would send your username/password in clear text :) will have to see if that's still the case...