For three years, I linked my bank account to every budgeting app that asked. It felt convenient. One click, instant sync, transactions flowing automatically. I didn't think much about what was happening on the other side of that connection.
Then, in early 2024, I actually read Plaid's terms of service.
Plaid is the data aggregator that sits behind nearly every personal finance app you've ever used — Mint, Monarch Money, YNAB, Venmo, Robinhood. When you "link your bank," you're not connecting to your bank. You're connecting to Plaid. And Plaid has your bank login credentials.
What Plaid Actually Collects
When you authorize a Plaid connection, you're giving the company permission to access:
- Your full transaction history
- Account balances across all linked accounts
- Account and routing numbers
- In some cases, investment holdings and payroll data
This isn't hypothetical data collection. In 2022, Plaid paid a $58 million settlement in a class-action lawsuit specifically for collecting more financial data than users had consented to. The settlement covered 98 million affected accounts.
98 million people.
The Convenience Trade-Off
I'm not saying budgeting apps are malicious. Most aren't. But when you link your bank account, you're entering a chain of trust that extends far beyond the app you're using. You're trusting the app, their data aggregator, the aggregator's security practices, and every third party that aggregator shares data with.
When any link in that chain breaks, your financial data is exposed. Not your preferences. Not your browsing history. Your actual transaction history. Where you eat. Where you shop. What you pay for your mortgage. What medications you buy.
The CSV Alternative
Every major bank in the United States lets you download your transaction history as a CSV file. Chase, Bank of America, Wells Fargo, American Express, Citi — all of them. It takes about 30 seconds.
You log into your bank's website directly — the one you already trust — download the file, and upload it to an app like Moosely. At no point does any third party ever touch your bank credentials.
The trade-off is that it's slightly more manual. You do it once a month instead of it happening automatically. For most people, that's a five-minute task.
For me, it was an easy decision. The automatic sync wasn't worth it.
What I Use Now
I switched to Moosely about six months ago. The CSV import takes me less time than I expected, and I get the same clean dashboards and spending analysis I had before. The difference is that my bank credentials have never left my possession.
If you've been on the fence about bank linking, I'd encourage you to read Plaid's terms of service yourself. The answer becomes pretty clear.