Automotive apps: who gets your car keys?

Most third-party apps for connected cars require access to your account with the manufacturer. But are they secure?