Is it safe to link your bank account to a budgeting app?

· 4 min read

A budgeting app asks to connect to your bank. A window opens from a company you've never heard of, asks you to pick your bank and sign in, and you have about ten seconds to decide whether that's fine.

It often is fine. But it's worth knowing what you're agreeing to, because the connection doesn't end when you close the app.

What happens when you click "connect"

Most budgeting apps don't talk to banks themselves. They use a data aggregator, a company whose whole business is fetching transactions from banks for other apps. Plaid and MX are two of the largest. That's the unfamiliar name in the window.

The aggregator gets into your account in one of two ways:

  • Your bank's own sign-in page. You're sent to the bank, you sign in there, and the bank hands the aggregator a token that allows limited access. Neither the aggregator nor the app sees your password.
  • Your username and password. You type your bank login into the aggregator's window, and it signs in as you to collect the data. This is the older method.

Which one you get depends on your bank, not the app. Banks have been moving to the first method, but not all of them have.

What you're actually sharing

For a budgeting app, the access is usually read-only: it can see, not move money. The permission screen should say so. Read it, because apps built for payments ask for more.

What it can typically see:

  • your account balances
  • your transaction history, often going back months or more
  • sometimes identity details, like your name and address

And it keeps seeing them. The connection refreshes, often daily, until you or the bank cut it off. Uninstalling the app doesn't do that.

The real risks, most likely first

1. Your data is used for something you didn't expect. Some free apps make money from what they learn about you, such as card offers based on your spending or aggregated data sold to research firms. It's usually in the privacy policy, not hidden. It's just rarely read.

2. Connections you forgot about. This is the most common problem, and the easiest to fix. Say you tried four budgeting apps over two years and kept one. Unless you went back and removed them, three companies you don't use may still have live access to your transactions.

3. A breach. At the app, or at the aggregator. Less likely on any given day, but the damage is bigger than it sounds. A year of transactions shows where you live, where you shop, who pays your salary, which clinics you visit and when you're away.

4. Your bank's terms. Some banks' online banking agreements say that sharing your password with a third party can affect your protection if there's fraud. This varies a lot by bank and by country. If your bank still uses the username-and-password method, look up its terms before connecting.

What's not a realistic risk for a read-only budgeting connection: the app taking money out of your account.

Five questions before you connect

  1. Does the sign-in happen on my bank's own page? If you're typing your bank password into someone else's window, that's the older, riskier method.
  2. Is the access read-only? It should say so on the permission screen.
  3. Does the privacy policy mention selling or sharing data for marketing? Search the page for "sell" and "partners".
  4. Can I delete my account and data, and how long does it take?
  5. Can I see and remove the connection from my bank's side?

If an app can't give you a clear yes on 1, 2 and 4, that's your answer.

How to check what's connected right now

This is worth five minutes even if you never connect another app.

  • Your bank. Many online banking sites have a page called something like "connected apps", "third-party access" or "data sharing". The name varies by bank; searching your bank's help pages for "third-party apps" usually finds it.
  • The aggregator. Plaid runs a portal at my.plaid.com where you can see which apps have used it to reach your accounts, and disconnect them.
  • The apps themselves. In each one you still have, look in settings for linked accounts and remove the ones you don't use. Then delete the account, not just the app.

If you'd rather not connect at all

You don't need a bank connection to budget. Your spending can come in three other ways: you type it, you upload the statement file your bank already lets you download, or you capture the receipts. Each has trade-offs. Typing makes you notice every purchase, statements are complete but only show totals, and receipts show what you actually bought but only cover what you capture.

Xpento doesn't connect to banks. It works from receipt photos and forwarded order emails. One honest note, since "no bank connection" can sound like "nobody else sees anything": Xpento sends receipt images to OpenAI and Anthropic to read them, and it doesn't sell your data. No bank connection removes the standing access to your account. It doesn't remove every third party.

Do this today

Open your bank's connected-apps page, or my.plaid.com, and remove every connection to an app you no longer use. Most people find at least one.

← All posts