This site did not show evidence of storing passwords in plaintext.
This site does allow secured connections (https)
This site did show a clear way to unsubscribe from their emails
This site does verify your email address.
Below is a sample of the emails you can expect to receive when signed up to getcarbon.
Please click the button below to verify your email address.
Verify Email Address
If you did not create an account, no further action is required.
If you're having trouble clicking the "Verify Email Address" button, copy and paste the URL below
into your web browser: https://bloom.getcarbon.co/email/verify/206?expires=1591941652&signature=f4f8724b1a473e30daab5d15c4ee2009bcf117fa9d201dddbd088c18f0624b32