I believe Vinny describes Civic as a user verification system whereby NO user data is stored anywhere other than your phone/device.  And in the case of apple Iphone in the Secure Enclave?  I see that https://app.civic.com stores user data including your social security number.  All with no complex password restrictions nor a required multifactor authentication.

What gives?

Thank You