The Bancorp Bank states it uses federally required security measures to protect your personal financial information, including computer safeguards and secured physical facilities.
This analysis describes what Chime's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause establishes Chime's operational obligation to maintain security infrastructure and frames this obligation by reference to federal legal compliance standards rather than specifying particular technical or procedural requirements.
The updated privacy notice now explicitly discloses that Chime shares customer information with other financial companies for joint marketing purposes, whereas the prior 2017 version stated Chime did not engage in this sharing. This represents a material change in the stated data handling practice. Under the updated terms, customers can limit this sharing by logging into their Chime account at chime.com or through the Chime Mobile application and updating their Privacy Settings.
View change record →The updated policy no longer explicitly discloses whether Chime or its banking partner The Bancorp shares personal information for specific purposes such as marketing, joint marketing, or affiliate use. Previously, each sharing scenario included a 'Yes' or 'No' answer and stated whether customers could limit sharing. The revised policy directs users to login to chime.com or the Chime Mobile application and update their Privacy Settings to control sharing. You can adjust sharing preferences through your account settings, but the policy no longer itemizes which sharing practices are subject to customer limits.
View change record →The updated notice states Chime no longer shares your personal information (such as transaction history and creditworthiness) with other financial companies for joint marketing purposes. This is a narrowing of third-party data sharing compared to the prior language. The notice also clarifies that Chime does not share certain affiliate information, which may further limit how your data is used by related companies. These changes reduce the scope of data sharing disclosed in the privacy notice.
View change record →The bank commits to using security measures compliant with federal law, but provides no specifics about encryption standards, access controls, or incident response timelines — making it difficult for consumers to evaluate the actual protection applied to their Social Security numbers, account data, and credit information.
How other platforms handle this
As security for the discharge of all present and future indebtedness and obligations owing by you to Robinhood Securities, you hereby pledge and grant to Robinhood Securities a security interest in and lien upon all securities and other property now or hereafter held, carried or maintained by Robinh...
Microsoft commits to implementing security controls for AI systems to protect against adversarial attacks, model theft, data poisoning, and other AI-specific security threats, and to conducting security testing of AI systems as part of the development and deployment lifecycle.
"To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.Excerpt from Chime's Privacy Policy
1) REGULATORY FRAMEWORK: Data security obligations for financial institutions are governed by the GLBA Safeguards Rule (16 C.F.R.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The clause establishes Chime's operational obligation to maintain security infrastructure and frames this obligation by reference to federal legal compliance standards rather than specifying particular technical or procedural requirements.
The bank commits to using security measures compliant with federal law, but provides no specifics about encryption standards, access controls, or incident response timelines — making it difficult for consumers to evaluate the actual protection applied to their Social Security numbers, account data, and credit information.
ConductAtlas has identified this type of provision across 2 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Chime.