Disconnecting an app or revoking Plaid access does not automatically delete your financial data from Plaid's systems; Plaid may keep it for business or legal reasons.
This analysis describes what Plaid's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Users who believe they have ended their relationship with Plaid by disconnecting apps may not realize their transaction history and financial data remains stored, creating ongoing privacy exposure without active deletion requests.
Interpretive note: The specific retention period language and enumerated retention grounds could not be directly verified from the truncated document; the analysis reflects Plaid's known published policy structure but the exact operative language may differ.
Developers who use Plaid's services now face expanded accountability for all activities on their accounts and stricter rules around who can access end-user financial data. If developers allow employees, contractors, or other agents to access their accounts, they must ensure those users only access data for approved business purposes and in compliance with Plaid's terms; Plaid reserves the right to monitor this activity through session replay and activity monitoring. Developers should audit which team members have account access, document the business need and approved use case for each, and ensure all authorized users understand their obligations under Plaid's terms.
View change record →Plaid's updated terms shift its business model from primarily connecting your accounts to third-party apps toward also providing direct consumer services, including account monitoring and alerts through a new web-based platform called Plaid Web-App. The terms now specify that your Plaid Account can store your financial and identity information, and that Plaid can use this data to provide its own streamlined services (like alerts and notifications) in addition to facilitating third-party app connections. This is not a privacy reduction, but a clarification that Plaid is now a service provider in its own right, not just an intermediary. You may want to review what the Plaid Web-App monitoring service entails and what data it collects, since it is a new direct service from Plaid rather than a third-party app feature.
View change record →Plaid has reframed its service model to emphasize a direct relationship between you and Plaid, rather than positioning itself primarily as a bridge to third-party apps. This means Plaid now states it provides services directly to you when you request them. Additionally, Plaid has introduced a new account monitoring and alerts service available via a web application directly to consumers, separate from third-party app integrations. The terms clarify that your Plaid Account remains non-transactional and does not store funds or enable direct payments, but now explicitly mentions it helps third-party apps initiate payments to or from you. You may wish to review the new web-based monitoring service offering and understand what account data it accesses and how it uses that data.
View change record →This provision means that revoking app permissions through Plaid does not automatically erase your financial data from Plaid's systems; to request deletion you must separately submit a data deletion request through my.plaid.com.
How other platforms handle this
You and your organization's administrator can access several types of Service Data directly from Google Cloud, including your account information, billing contact information, payment and transaction information, as well as product and communication settings and configurations.
to request that your data be transferred to a third party (data portability)
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"Even after you disconnect a financial account or revoke an application's access, Plaid may retain certain data as required by law, for fraud prevention, to resolve disputes, to enforce our agreements, or for other legitimate business purposes. Retention periods vary based on the type of data and the purpose for which it was collected.Excerpt from Plaid's Terms of Use (Legal Index)
(1) REGULATORY LANDSCAPE: Data retention practices after service termination are directly regulated by GDPR's storage limitation principle (Article 5(1)(e)) and by CCPA and CPRA deletion rights for California residents; vague retention language referencing 'legitimate business …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Users who believe they have ended their relationship with Plaid by disconnecting apps may not realize their transaction history and financial data remains stored, creating ongoing privacy exposure without active deletion requests.
This provision means that revoking app permissions through Plaid does not automatically erase your financial data from Plaid's systems; to request deletion you must separately submit a data deletion request through my.plaid.com.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Plaid.