When you click purchase you will be asked to sign into Cydia using your Facebook or Gmail account so that if you need to re-download you can do so. It means allowing Saurik's server to see your password, but I'd trust Saurik before I'd trust many companies. And really, what interest does he have in reading my email? 😛