A valid private key to an account is required in order to submit transactions on your behalf. This key is only used for connection to the blockchain(same as Metamask etc.), stays on your device, and is not transmitted over the internet in any way. If you are not comfortable with this, do not use.