Acorns · Acorns Privacy Policy · View original document ↗

Account Linking and Third-Party Data Aggregator Access

Medium severity Medium confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Acorns recorded 7 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Acorns Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

If you link an outside bank or financial account to Acorns, the app may collect your balance, transaction history, and other account data using third-party aggregator services.

This analysis describes what Acorns's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Linking external financial accounts extends the scope of data Acorns collects beyond its own platform, and involves third-party aggregators who may have their own data retention and sharing practices.

Interpretive note: The specific aggregator(s) used are not named in the policy, and their individual data practices are governed by separate agreements not reviewed here.

Consumer impact (what this means for users)

When you link a bank account or other financial account to Acorns, your full transaction history and account balances from that external account are collected and may be processed by a third-party aggregator service under terms separate from Acorns' own policy.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    If you have unlinked an external financial account and want the associated data deleted, email privacy@acorns.com to submit a data deletion request specifying the linked account data.

Cross-platform context

See how other platforms handle Account Linking and Third-Party Data Aggregator Access and similar clauses.

Compare across platforms →

Monitoring

Acorns has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
If you choose to connect third-party financial accounts to our services, we may collect information from those accounts, such as account balances, transaction history, and other financial information. We may use third-party data aggregators to facilitate these connections.

— Excerpt from Acorns's Acorns Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: The collection of external financial account data via third-party aggregators engages the CFPB's data rights framework under Section 1033 of the Dodd-Frank Act, which addresses consumer access to their own financial account data and the use of that data by authorized third parties. The CFPB finalized rules on personal financial data rights in 2024 that impose obligations on data providers and third-party data recipients. Aggregator services such as Plaid or Finicity have their own regulatory and contractual frameworks that interact with this provision. GOVERNANCE EXPOSURE: Medium. The use of third-party aggregators introduces a data handling layer outside Acorns' direct control. Regulatory focus on screen scraping, data minimization, and consumer consent for account data access has increased significantly following CFPB rulemaking activity. JURISDICTION FLAGS: The CFPB's Section 1033 rulemaking applies to covered entities nationwide. California's CPRA applies to transaction data collected from linked accounts as personal information. Users in states with strong financial data protection statutes may have additional rights regarding how linked account data is stored and used. CONTRACT AND VENDOR IMPLICATIONS: Contracts with third-party aggregators should specify permissible data uses, retention limits, deletion obligations upon account unlinking, and liability allocation for data breaches involving aggregated financial data. Teams should confirm that aggregator relationships have been assessed against CFPB Section 1033 requirements. COMPLIANCE CONSIDERATIONS: Compliance teams should document which aggregator(s) Acorns uses, review those service provider agreements for CFPB and CPRA compliance, and ensure that users who unlink external accounts can request deletion of historical data collected from those accounts. Consumer-facing disclosures should clearly explain what data is collected via aggregators and how long it is retained.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • CFPB
    The CFPB regulates consumer access to financial account data and third-party data aggregation under Dodd-Frank Section 1033 and its implementing rules.
    File a complaint →

Provision details

Document information
Document
Acorns Privacy Policy
Entity
Acorns
Document last updated
May 5, 2026
Tracking information
First tracked
May 9, 2026
Last verified
May 9, 2026
Record ID
CA-P-007366
Document ID
CA-D-00172
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
10c29188bb1348120a6988e4542188f756f4b51236b5331249862e803020c3f7
Analysis generated
May 9, 2026 17:59 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Acorns
Document: Acorns Privacy Policy
Record ID: CA-P-007366
Captured: 2026-05-09 17:59:45 UTC
SHA-256: 10c29188bb134812…
URL: https://conductatlas.com/platform/acorns/acorns-privacy-policy/account-linking-and-third-party-data-aggregator-access/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Acorns's Account Linking and Third-Party Data Aggregator Access clause do?

Linking external financial accounts extends the scope of data Acorns collects beyond its own platform, and involves third-party aggregators who may have their own data retention and sharing practices.

How does this clause affect you?

When you link a bank account or other financial account to Acorns, your full transaction history and account balances from that external account are collected and may be processed by a third-party aggregator service under terms separate from Acorns' own policy.

Is ConductAtlas affiliated with Acorns?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Acorns.