[mikeodds]

I got the same answer from them on HN here 10 months ago

https://news.ycombinator.com/item?id=27467797#27476452

Me: Always been curious - do you (Plaid) use the transaction data or any other data obtained from customers logins for anything other than the reason the customer supply’s their credentials? I.e if I use plaid to link to my Robin Hood account, do you in any way sell/share/use my data apart from allowing me to fund my Robin Hood account?

Response: Good question! No, we don't. Our official statement on this is at https://plaid.com/how-we-handle-data/ "Plaid only shares your data with your consent. We don’t share your personal information without your permission, and we don’t sell or rent it to outside companies."

[Terretta]

That could easily be a lawyer-speak official statement.

They say “personal information”. That is consumer-facing language for something which in banking has a legally (regulation) defined term: “PII” or personally identifiable information:

https://www.investopedia.com/terms/p/personally-identifiable...

It can be argued that lists of money spent at stores cannot be reversed back to a person without other information. So they might not consider your transactions PII.

As for the consent, the TOS click wrap generally gets your consent, in the part where firms mumble about “our partners” for “legitimate uses” or etc. while bucketing various data brokers in that class.