"It is also stored securely on our servers using industry standard firewall technology."

Undoubtably in plaintext. Having "industry standard firewall technology" didn't do jack for Zappos, why would Path's data be any more secure?