SiSense Security Concern

Regarding our data-source passwords that are stored directly in the self-hosted environments, we were told that we have to update these passwords.  Are they somehow being sent back to Sisense and if so, what purpose would Sisense have for logging these? I understand this would be the case if we had signed up for the Sisense on-premise's environment, but we didn't.