I've been using Basecamp for a few months, and overall it seems to suit our needs better than most of the alternatives I've seen.
I do like the fact that you seem to be more receptive to changes, so I am definitely open considering a switch.
My single biggest annoyance with Basecamp is something that unfortunately you copy as well. I really have a problem with sending passwords via email. What's the point of using SSL for access when the password is mailed to the user? Yes, I know you provide instructions on how to change it, but that assumes the user will do so. What if they don't?
To overcome this, all you need to do is send an initial password that MUST be changed, or even just send a one-time URL that brings them to a password set prompt.
Once you go that far, it would be nice to be able to see from an admin screen if they've set their password. If they don't get to it for a while, I may want to nag them or suspend the account to avoid someone else taking advantage of an open window.
Thanks.
