If your password leaked, a thief could have logged in and configured your account to send a copy of every email to another account. You might never notice, because you would still see all your email, too. To guard against this, check your accounts, filters, and forwarding settings. Open Gmail in your browser and access Settings. I suggest you only allow apps that pass three "trust tests" to access your Gmail account. First, make sure the apps can be installed from the Google Apps Marketplace. That means the maker has taken the trouble to comply with Google's Apps Marketplace policies and review at minimum. Next, look for a third-party review of the organization's policies and practices (e.g., SOC 2 compliance). Third, carefully examine the company and people behind the app: Is it a team you trust? For more Gmail Guidance you can visit at http://goo.gl/Rrv300!