Verifone asserts that Square has a gaping security hole

According to Verifone the dongle supplied by Square does not encrypt credit card information which can be read by any malicious app. Square security page at https://squareup.com/security does not mention anything about hardware encryption within the dongle, however it states that no credit card information is stored within Square client.