Stash collects your bank account login credentials, meaning the username and password you use to log into your external bank account, in addition to your Social Security number and other highly sensitive financial identifiers.
This analysis describes what Stash's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Collection of bank login credentials is associated with account aggregation services that access your external financial accounts on your behalf; this practice involves significant security considerations and may be subject to regulatory scrutiny regarding data access standards and consumer protection.
Stash collects your actual bank account login credentials as part of account linking, which means providing a third party with the ability to access your external financial accounts; consumers should understand what access is granted and whether it persists after initial linking.
How other platforms handle this
You and your organization's administrator can access several types of Service Data directly from Google Cloud, including your account information, billing contact information, payment and transaction information, as well as product and communication settings and configurations.
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
If you registered to use Notion's Services with such an email address, but you do not use the Services in connection with your organization...you may transfer your account to a different email address.
"Your name, alias, date of birth, citizenship and passport number, visa information, home address, telephone number, email address, Social Security number, bank account number, bank routing number, bank account login credentials, bank name, employer name, employment status, and job position.Excerpt from Stash's Privacy Policy
REGULATORY LANDSCAPE: The collection and use of consumer bank login credentials for account aggregation engages the CFPB's regulatory posture on financial data access, including the CFPB's Personal Financial Data Rights rule (Section 1033 of the …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Collection of bank login credentials is associated with account aggregation services that access your external financial accounts on your behalf; this practice involves significant security considerations and may be subject to regulatory scrutiny regarding data access standards and consumer protection.
Stash collects your actual bank account login credentials as part of account linking, which means providing a third party with the ability to access your external financial accounts; consumers should understand what access is granted and whether it persists after initial linking.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stash.