When you link an outside bank or investment account to Wealthfront, you are authorizing Wealthfront to repeatedly log into that account on your behalf using your credentials, for as long as the link is active, not just once.
This analysis describes what Wealthfront's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This authorization is broad and ongoing: it grants Wealthfront and its subprocessors (Yodlee or Plaid) continuous access to your external financial accounts, including transaction history and balances, until you actively remove the link.
Consumers who link external financial accounts grant Wealthfront and its service providers repeated access to those accounts, including all available account information, with this authorization persisting until the consumer actively deactivates the account link.
Cross-platform context
See how other platforms handle Ongoing Third-Party Account Credential Re-Access Authorization and similar clauses.
Compare across platforms →Monitoring
Wealthfront has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"By choosing to use our Services to aggregate and analyze your Outside Account Information, you expressly authorize and direct Wealthfront, on your behalf, to access all Outside Account Information available via the login credentials you provide. You also authorize and direct Wealthfront periodically to refresh your retrieved Outside Account Information by re-accessing your linked third-party accounts using your login credentials for so long as the ACH link remains active.— Excerpt from Wealthfront's Wealthfront Privacy Policy
(1) REGULATORY LANDSCAPE: This provision engages the Electronic Fund Transfer Act (EFTA) and Regulation E regarding authorized account access, as well as emerging Consumer Financial Protection Bureau open banking rules under Section 1033 of the Dodd-Frank Act, which are intended to govern consumer-permissioned data access. GLBA also applies to the handling of nonpublic personal financial information accessed via this mechanism. The FTC's unfair or deceptive practices authority may be relevant if the scope of ongoing access is not adequately disclosed. (2) GOVERNANCE EXPOSURE: Medium. The provision clearly discloses the ongoing nature of the access, which supports a consent defense. However, the scope of 'all Outside Account Information available' is broad and may capture data beyond what is necessary for the stated purposes, creating potential proportionality questions under applicable data minimization principles. The delegation of credential storage and re-access to Yodlee or Plaid under their own terms creates a layered privacy governance structure that Wealthfront only partially controls. (3) JURISDICTION FLAGS: California residents may have CCPA rights to know about data collected via this mechanism. EU or EEA residents, if any use the service, would face additional exposure given GDPR's stricter requirements on purpose limitation and data minimization for credential-based access. The CFPB's Section 1033 rulemaking may impose additional requirements on this type of consumer-permissioned data sharing as it is finalized. (4) CONTRACT AND VENDOR IMPLICATIONS: Yodlee's FastLink Terms of Service and Plaid's privacy policy are incorporated by reference, meaning consumers are subject to third-party terms that Wealthfront does not control. Procurement teams should assess whether Yodlee and Plaid data use limitations align with Wealthfront's stated restrictions and whether contractual data use limitations are enforceable against these subprocessors. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should ensure that the consent mechanism for account linking is sufficiently specific and informed, particularly regarding the ongoing and periodic nature of credential re-use. Data mapping should capture Outside Account Information flows to Yodlee and Plaid separately from Wealthfront's own data stores, and vendor assessments should confirm that these providers do not use accessed data for their own purposes beyond what Wealthfront's policy permits.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This authorization is broad and ongoing: it grants Wealthfront and its subprocessors (Yodlee or Plaid) continuous access to your external financial accounts, including transaction history and balances, until you actively remove the link.
Consumers who link external financial accounts grant Wealthfront and its service providers repeated access to those accounts, including all available account information, with this authorization persisting until the consumer actively deactivates the account link.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Wealthfront.