Connect each service once. Your credentials stay on your device — that's the whole setup.
End-to-end principle. Raw messages never leave your device. The assistant only receives what you share.