I would not give my root access info to any contractor. It would be much safer to setup an account that would allow that contractor access to the website files. Check with your hosting company if you are not familiar with doing this.

If you have problems with the contractor, you can delete thier account as well as gather any evidence of wrongdoing if you need to take legal action.