yes that's true, you never give a private key and password to anyone for any reason. keep them well, don't let your assets disappear because of your negligence.