If you allow client and third party apps (Calendar, Contacts, ownCloud desktop client, etc) access to your ownCloud, you should also install the OAuth2 app that uses tokens instead of passwords for access. Clients and third party apps do not store passwords locally. You log in initially using your login on ownCloud and then the app gets a token to use to login. You can revoke the token if necessary.