xSmashcast uses WebAuthenticationBroker for login function, and doesn't have access to password user types in login screen, all it gets out of the authorization is an access token from smashcast.tv.
Information xSmashcast stores locally
xSmashcast stores user setting and the access token locally on the device it is running on. User can revoke the access token anytime by visiting smashcast.tv account->connections->connected apps.
Information xSmashcast transfers out
xSmashcast doesn't transfer any private information out of the device it is running on.
By using xSmashcast, you signify your acceptance of this policy. If you do not agree to this policy, please do not use xSmashcast. Your continued use of xSmashcast following the posting of changes to this policy will be deemed your acceptance of those changes.