Cash App collects your bank account numbers, payment card numbers, and Cash App Card details when you add them to your account.
Storing full bank account and card numbers with a payments platform creates financial risk if the platform is breached or your account is compromised.
Collection and storage of bank account and payment card numbers triggers PCI DSS compliance obligations and GLBA safeguards requirements. Compliance teams should assess Cash App's tokenization practices, breach response protocols, and third-party processor agreements.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Cash App collects highly sensitive personal data including biometric facial scans, Social Security numbers, bank account numbers, geolocation, and detailed transaction histories, and shares this information with affiliates, advertisers, financial partners, and law enforcement. Users have limited ability to opt out of certain data uses, particularly marketing and behavioral profiling, though state residents (e.g. California, Colorado) may have broader rights including data deletion and opt-out of data sharing. You can submit a data access, deletion, or opt-out request through Cash App's privacy request portal at https://cash.app/legal/us/en-us/privacy.