Haven't looked at this one, but these things usually ask for and store your login details, and then simply scrape the bank's own online banking site to serve it up as an API.
Because what else can they do? They have the same access you do. Unless you don't give them it, which you shouldn't.
Because what else can they do? They have the same access you do. Unless you don't give them it, which you shouldn't.