This analysis describes what Plaid's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Data deletion rights provisions establish operational obligations for the service provider to implement consumer-initiated data removal requests within defined parameters. This provision governs how Plaid handles the administrative and technical requirements associated with data purging and retention cessation.
End consumers may see their financial data accessed by a broader range of people under developer accounts, but Plaid now requires developers to formally designate and manage these 'Authorized Users' and take responsibility for their conduct. The introduction of session replay and activity monitoring means developer interactions with your financial data may be recorded for audit or security purposes. The policy does not specify what data is covered by monitoring or how long recordings are retained, which creates operational uncertainty for developers handling sensitive consumer financial information.
View change record →Plaid's updated terms establish a new direct relationship with you through the Plaid Account and introduce a monitoring service that operates through a web app. The terms now authorize Plaid to share financial information needed for third-party apps to initiate payments to or from you, which is a broader statement of data-sharing scope than the previous language. This means Plaid's role shifts from primarily facilitating connections to third-party apps toward directly providing account services, including monitoring. The effective date is April 14, 2026, though the change was detected on April 19, 2026. Review your Plaid Account settings to understand what data Plaid holds and how the monitoring service works.
View change record →The updated terms clarify that Plaid may request and collect phone numbers, email addresses, and other contact information when you connect financial accounts or verify your identity through a Plaid-connected application. The terms no longer describe a separate Plaid Monitoring Service or Plaid Web-App. The Plaid Account is now framed primarily as a tool to accelerate onboarding and use of third-party applications rather than as a standalone service for monitoring and alerts. The updated language authorizes Plaid to store identity verification data within your Plaid Account if you choose to do so.
View change record →This provision authorizes consumers to initiate deletion of their personal data records through a specified request process, which Plaid is obligated to execute according to the terms' defined procedures and timelines. The mechanism establishes the conditions under which retained data may be removed from Plaid's systems.
How other platforms handle this
You may request that we delete your personal information. Subject to certain exceptions, upon receiving a verifiable consumer request, we will delete your personal information from our records and direct our service providers and contractors to delete your personal information from their records.
Managing And Deleting Your Information. You have the right to access, correct, or delete your information in certain circumstances. We store information until it is no longer necessary to provide our Services or until your account is deleted, whichever comes first. You can delete your WhatsApp accou...
You may request that we delete personal information we have collected from you, subject to certain exceptions. You may also request access to the personal information we hold about you. To submit a request, please visit our privacy request page. We will respond to verifiable consumer requests within...
Monitoring
Plaid has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Data deletion rights provisions establish operational obligations for the service provider to implement consumer-initiated data removal requests within defined parameters. This provision governs how Plaid handles the administrative and technical requirements associated with data purging and retention cessation.
This provision authorizes consumers to initiate deletion of their personal data records through a specified request process, which Plaid is obligated to execute according to the terms' defined procedures and timelines. The mechanism establishes the conditions under which retained data may be removed from Plaid's systems.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Plaid.