So let me get this straight - if I run custom software on my device, provided by someone I don't know, and my credit card number is stored on that device, it's

So let me get this straight - if I run custom software on my device, provided by someone I don't know, and my credit card number is stored on that device, it's possible for the unknown software provider to READ MY DATA?! Amazing.