Folks, this gets even worse.  When you dismiss an employee, of course you delete their login from the software.  But the ONLINE login they created remains - in fact, users are able to use a personal login (such as from turbo tax) to satisfy the QB requirement of having an online account.  In an age of increased security, if you genuinely cared about MY security instead of your marketing, you would not permit this. I'm told by Intuit this is nothing to worry about --- but why should I take them at their word?