When you use Plaid to connect your bank account to an app, that app receives your financial data, and its own privacy terms govern how that app handles it rather than Plaid's terms.
This analysis describes what Plaid's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Your detailed financial transaction data flows to third-party app developers under their own separate privacy policies, which may permit uses of that data that Plaid's policy does not address.
Interpretive note: The document was heavily truncated and the specific downstream sharing language could not be directly verified; the analysis reflects Plaid's known published terms but the exact operative text may differ from the excerpt presented.
Developers who use Plaid's services now face expanded accountability for all activities on their accounts and stricter rules around who can access end-user financial data. If developers allow employees, contractors, or other agents to access their accounts, they must ensure those users only access data for approved business purposes and in compliance with Plaid's terms; Plaid reserves the right to monitor this activity through session replay and activity monitoring. Developers should audit which team members have account access, document the business need and approved use case for each, and ensure all authorized users understand their obligations under Plaid's terms.
View change record →Plaid's updated terms shift its business model from primarily connecting your accounts to third-party apps toward also providing direct consumer services, including account monitoring and alerts through a new web-based platform called Plaid Web-App. The terms now specify that your Plaid Account can store your financial and identity information, and that Plaid can use this data to provide its own streamlined services (like alerts and notifications) in addition to facilitating third-party app connections. This is not a privacy reduction, but a clarification that Plaid is now a service provider in its own right, not just an intermediary. You may want to review what the Plaid Web-App monitoring service entails and what data it collects, since it is a new direct service from Plaid rather than a third-party app feature.
View change record →Plaid has reframed its service model to emphasize a direct relationship between you and Plaid, rather than positioning itself primarily as a bridge to third-party apps. This means Plaid now states it provides services directly to you when you request them. Additionally, Plaid has introduced a new account monitoring and alerts service available via a web application directly to consumers, separate from third-party app integrations. The terms clarify that your Plaid Account remains non-transactional and does not store funds or enable direct payments, but now explicitly mentions it helps third-party apps initiate payments to or from you. You may wish to review the new web-based monitoring service offering and understand what account data it accesses and how it uses that data.
View change record →This provision means your bank transaction history and account data is shared with the specific apps you connect, and each of those apps' privacy policies separately governs how they use, store, or further share that data, creating a chain of data relationships that Plaid's terms do not fully control.
How other platforms handle this
Protect us, our business, our users, and others, for example to enforce our terms of service, prevent spam or other unwanted communications, and investigate or protect against fraud
we may use, retain or share information with law enforcement or others in circumstances where a person's vital interests require protection, such as in the case of emergencies.
we may share data between our affiliates for the safety and security of our users and may take necessary actions if we believe you have violated these Terms, including banning you from our Services and/or our affiliates' services...
"Plaid may share your financial account information and transaction data with the third-party developer applications that you authorize to access your accounts. Developers who receive your data are subject to their own privacy policies and terms of service, and Plaid is not responsible for their data practices.Excerpt from Plaid's Terms of Use (Legal Index)
(1) REGULATORY LANDSCAPE: Downstream data sharing arrangements implicate CCPA and CPRA obligations around service provider versus third-party classifications; if developer clients use shared data for purposes beyond service delivery, they may qualify as third parties …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Your detailed financial transaction data flows to third-party app developers under their own separate privacy policies, which may permit uses of that data that Plaid's policy does not address.
This provision means your bank transaction history and account data is shared with the specific apps you connect, and each of those apps' privacy policies separately governs how they use, store, or further share that data, creating a chain of data relationships that Plaid's terms do not fully control.
ConductAtlas has identified this type of provision across 288 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Plaid.