Is it safe to link your bank to a budgeting app? Security and privacy checklist

How bank linking works

Most budgeting apps do not connect to your bank themselves. They use an aggregator, a company such as Plaid, MX, Finicity, Yodlee or Salt Edge, that connects to the institution, retrieves balances and transactions, and passes them to the app. Where banks offer open banking or token-based connections, the aggregator receives a token rather than your password; elsewhere it may store credentials.

Read-only means the connection can fetch data but cannot initiate payments. That limits the worst case to exposure of your transaction history and balances, which is still sensitive: it reveals where you live, shop, bank and get paid.

This guide summarises what vendor security and privacy pages say, read on 29 October 2026. It is not an independent security audit, and we have not tested any of these claims.

What each vendor's pages actually state

Blank means the pages we read did not address it, not that the answer is no. Lunch Money's main website returned an access error when we tried to read it, so its column relies on its help center.

Points worth reading closely

Data sale is not a yes or no. Both YNAB and Monarch say they do not sell your financial data, but both note that advertising-related sharing may be treated as a sale or share under some state privacy laws, and both offer an opt-out. If that matters to you, use the opt-out link or a Global Privacy Control browser signal, which Monarch's policy says it honours.

Credentials differ by route. PocketSmith is unusually transparent that its Yodlee connections require it to collect your banking credentials and pass them on. If your bank is reachable through another provider in your region, that may be preferable; check which provider each connection uses. YNAB's help center explains how to see which provider each of your bank connections uses.

Cancelling is not deleting. Monarch's help center says cancelling a subscription does not delete your account. YNAB keeps account data for a period after expiry unless you delete it. Lunch Money purges accounts with no billing information five days after the trial ends.

Checklist before you link anything

• Find the app's security page and privacy policy. If either is missing or vague, do not link.
• Identify the aggregator for each bank you will connect, and whether it uses a token or stores credentials.
• Confirm the connection is described as read-only.
• Turn on authenticator-app two-factor login before connecting accounts, and save recovery codes in a password manager.
• Use a unique password for the budgeting app.
• Read the data sale and advertising section; use the opt-out if offered.
• Note the deletion process and what is retained after deletion.
• Connect only accounts you will actually budget or track.
• Check how to revoke access before you need to.

How to revoke access later

Work from the inside out. First, remove or disconnect the bank connection inside the budgeting app. Second, if the connection used Plaid, visit Plaid Portal at my.plaid.com, which Plaid says lets you view the data you have shared through it and control ongoing access; Plaid's site also links a Delete my data page. Third, look in your bank's online security or privacy settings for a list of connected third-party apps; not every bank provides one, so ask the bank if you cannot find it. Finally, delete the budgeting app account itself, after cancelling any subscription and downloading anything you want to keep.

Expect some connections to lapse on their own: Lunch Money's help center notes that some jurisdictions require banks to renew third-party access every 90 or 120 days.

If you would rather not link at all

You do not have to link to use some of these apps. YNAB offers file-based import for banks outside direct import, and Lunch Money supports importing transactions from CSV files or PDF bank statements. You give up automatic updates in exchange for keeping credentials and live access out of the picture. A spreadsheet is the most private option; our app-or-spreadsheet guide covers the trade-offs.