Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallAccount aggregators are not automatically safe or unsafe. They help a financial app access and organize information from accounts you choose, but the data-sharing chain can involve sensitive information beyond your bank. The connection method and permissions vary: some connections use credentials, while others rely on institution-mediated access. Sharing data does not, by itself, establish that an app can move money. Before approving a connection, check exactly what it can access, how often it connects, what it retains, and whether it can initiate payments.
What is an account aggregator?
An account aggregator is a participant in a data-sharing chain, not a single kind of app or a uniform set of permissions. You may choose a budgeting, lending, payment, or other financial service, while a separate aggregator helps that service retrieve and standardize data from your financial institution. The service, aggregator, institution, connection method, and authorization all affect what happens.
As an Amazon Associate I earn from qualifying purchases.
Services may use shared data for budgeting, financial advice, product shopping, sending or receiving money, saving, identity verification, lending decisions, or improving a credit profile. Some need data once; others access accounts on an ongoing basis. The CFPB’s consumer guidance describes these different uses and encourages consumers to consider what data a service uses and how often it accesses accounts: CFPB: What to consider when sharing your financial data.
How does an aggregator connect to a financial account?
The FDIC describes two broad approaches. Their labels help explain how access may work, but neither label alone tells you whether a particular provider has strong security controls.
#1 Best Overall
Credential-based access
With credential-based access, the customer-permissioned company uses the customer’s credentials to access the institution’s online banking service. That can mean credentials are exposed beyond the financial institution, so it is worth checking whether the specific connection asks for or handles your username and password.
Institution-mediated API or token access
With API- or token-based access, the aggregator interfaces with the institution using authentication credentials the institution supplies. This differs from handing an aggregator the credentials used to log in to online banking, but the connection type is not a security rating and does not reveal every detail of data use or storage.
Rank #2
- Ideal for Gifting
- Ideal for a bookworm
- Compact for travelling
The FDIC outlines these models in its discussion of third-party access to consumer financial accounts: FDIC: Third-party access to consumer financial accounts.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →What a provider-specific explanation can—and cannot—tell you
Plaid says the connection type determines whether it has access to a consumer’s account login credentials. It also says that in many cases the consumer authenticates with the financial institution, which then returns data to Plaid, and that Plaid does not share credentials with connected apps or services. Those are Plaid’s statements about Plaid; they should not be assumed to describe every aggregator. See Plaid’s explanation of credential access.
Rank #3
What financial data might be shared?
The exact categories depend on the institution, connection, and permission you approve. CFPB principles identify a potentially broad range of financial information, including:
- Transactions or series of transactions, as well as other aspects of account use.
- Account terms, such as fee schedules.
- Realized costs, such as fees or interest paid.
- Benefits, such as interest earned or rewards.
This list describes possible categories, not a promise that every connection provides all of them. The CFPB’s 2017 principles say a third party should access only information needed for the service the consumer selected and retain it only as long as necessary. They are a consumer-protection framework, not a guarantee that a particular service follows those practices or a binding rule: CFPB: Consumer protection principles for financial data sharing and aggregation.
Can an account aggregator move money?
Do not assume that data access and payment authority are the same thing. The capability depends on the service and the authorization you grant. A data connection may be for viewing or using account information, while a service may separately seek permission to make payments or move funds. The CFPB specifically advises consumers to check whether a service can make payments or move money between accounts before sharing data. Read the authorization screen and terms rather than relying on the word “aggregator.”
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →U.S. regulation text at 12 CFR § 1033.431 describes certain authorization procedures a data aggregator may perform on behalf of a third party, while leaving that third party responsible for compliance with those procedures. It also sets out disclosure and consumer-facing certification requirements. The regulation page was marked current when accessed, but that alone does not settle the present implementation status of the broader rule or the effects of litigation or agency action. Do not treat it as proof that every consumer can currently rely on each provision. Check the current official text and your actual authorization: 12 CFR § 1033.431.
Best Value
What should you check before linking an account?
Use the permission screen and service terms to answer these questions before approving access:
- What data are they using from your accounts? Check the accounts and categories requested, not just the app’s general description.
- How often will the service access your accounts? Find out whether access is one-time or ongoing.
- What does it retain, and for how long? Look for retention periods and any additional use or sharing beyond the service you chose.
- Can it make payments or move money? Review payment authority separately from data access.
- How do you revoke access and request deletion? Check what revocation stops—future access, use, storage, or some combination—and how to ask for deletion where applicable.
- Who can you contact? Confirm the service has usable contact details and understand how it handles errors or transactions you do not recognize.
- Does the service appear legitimate? Check the identity of the company and whether its disclosures and support channels are clear.
These checks can help you understand the permission you are granting, but they cannot guarantee a service is risk-free. The CFPB’s guidance on sharing financial data is a useful consumer checklist: What to consider when sharing your financial data.
How do you stop sharing data?
If you stop using a service, cancel its authorization and, where applicable, ask it to delete data it collected. Deleting the app alone may not end data sharing. Changing your bank password may not always end access either, particularly where access is maintained through another connection method. Follow the service’s revocation process and check with your financial institution if you are unsure whether access has ended.
What if shared credentials are involved in a breach?
If a company or aggregator reports a breach involving credentials you shared, the CFPB advises changing the passwords for the affected financial accounts and contacting your bank about additional protective steps. Keep reviewing account statements and promptly report transactions you do not recognize to the financial institution. See the CFPB’s consumer guidance for its recommendations on responding to a reported breach.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
