Recommended Free Tools
The reliable way to evaluate an investing app is to treat its privacy notice as a map of information practices, not as a promise that your data is simply “private” or that you can erase it on demand. Identify the legal entity and product covered, inventory the data collected and its sources, match every purpose to recipient types, test the actual opt-out process, read what survives account closure, and separate data rights from the vague word “ownership.”
In the United States, the Gramm-Leach-Bliley Act (GLBA) requires covered financial institutions to explain information-sharing practices and safeguard sensitive data, but it does not give consumers a universal veto over every disclosure. The Federal Trade Commission’s overview is a useful starting point, while the exact regulator and obligations depend on the institution and facts: FTC Gramm-Leach-Bliley Act guidance.
As an Amazon Associate I earn from qualifying purchases.
1. Confirm whose promise you are reading
An investing app may put several businesses behind one interface: a brokerage, an investment adviser, a bank, a clearing firm, an identity-verification vendor, and a technology company. Each can have a different privacy notice, retention policy, and legal duty. Start at the notice’s first page and record the exact entity name, product or account covered, jurisdiction, revision date, and instructions for contacting the privacy team.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsCheck the entity and product scope
- Write down whether the notice covers a brokerage account, advisory account, cash-management or bank product, retirement account, or another service.
- Look for language covering affiliates, introducing brokers, clearing firms, fund companies, and service providers. A notice for an investment-management subsidiary is not automatically the notice for a retail brokerage account using the same app.
- Save the revision date and a copy of the notice. A later version can change sharing descriptions or contact channels.
- Check the governing geography. U.S. GLBA language, state privacy supplements, and European Union or United Kingdom sections can provide different rights.
Why a brand-level judgment fails
The app name is not a sufficient unit of analysis. The legal entity that opens your account may be different from the company that supplies the mobile software. Read the privacy notice attached to the account agreement and then follow links for affiliated entities that receive information. If a notice says another company’s terms apply to a feature, evaluate that document separately rather than assuming the first notice covers it.
2. Build a data inventory instead of scanning for reassuring words
Copy each category of information into a worksheet and record how it is obtained. Investment-related notices commonly describe substantially more than a name and email address.
Categories to look for
| Data category | Examples to locate in the notice | Questions to ask |
|---|---|---|
| Identity and contact | Name, address, date of birth, government identifier, phone number, email | Is collection required for account opening, fraud prevention, tax reporting, or marketing? |
| Financial profile | Income, employment, net worth, bank or wire instructions | Which entities can receive it, and is it reused for eligibility or marketing? |
| Investment information | Portfolio holdings, balances, transaction history, investment experience, risk tolerance | Is it shared with affiliates, advisers, analytics vendors, or prospective product providers? |
| Device and activity | Device identifiers, IP address, app events, cookies, contact or usage data | Does the notice distinguish security telemetry from advertising or personalization? |
| Third-party and affiliate data | Information from credit bureaus, data providers, affiliates, employers, or public records | Can you correct the source data, and is it combined with your account activity? |
Provider disclosures illustrate the level of detail that can matter. The Fidelity notice lists portfolio, account-balance, transaction-history, investment-experience, and risk-tolerance information, as well as bank and wire information; the Morgan Stanley Investment Management notice likewise describes financial and account information. These are examples of what to look for, not a claim that every app collects every item. See the Fidelity and Fidelity Funds privacy notice, revised June 2026, and the Morgan Stanley Investment Management U.S. Customer Privacy Notice, March 2026.
Record the source for each category
Mark whether the information comes directly from you, from transactions, from an affiliate, from a service provider, or from a public or commercial source. “We collect information from third parties” is not enough detail to judge exposure; the source may determine whether the app can correct it and why the app considers it necessary.
3. Map each purpose to each recipient
Privacy tables are more informative when read row by row. Separate the reason for a disclosure from the type of organization receiving it. “No sale” does not answer who can process data to run the account, support fraud controls, market affiliated products, or satisfy a legal request.
| Purpose or use | Recipient type to identify | What to verify |
|---|---|---|
| Execute trades, maintain the account, issue statements, or process payments | Brokerage affiliates, clearing firms, custodians, banks, and operational service providers | Which data is necessary, whether the recipient may reuse it, and how long records remain available |
| Fraud prevention, authentication, analytics, or technology support | Security, identity, cloud, communications, and analytics vendors | Whether contracts restrict use, staff access, onward disclosure, and retention |
| Affiliate marketing or cross-selling | Companies under common ownership | Whether an opt-out exists and whether it covers all affiliates or only specified information |
| Joint marketing | The app and an unaffiliated financial company marketing a product together | Whether the notice says this occurs and whether a separate opt-out applies |
| Nonaffiliate marketing | Unaffiliated companies using information for their own marketing | Whether this sharing is permitted, limited to certain data, or excluded |
| Legal, regulatory, or corporate events | Courts, regulators, law-enforcement agencies, auditors, buyers, or successors | Whether disclosure is mandatory, conditional, or described as a business transfer |
Use the definitions section
“Affiliate,” “nonaffiliate,” and “service provider” are not interchangeable. An affiliate is generally related by ownership or control; a nonaffiliate is outside that corporate group; a service provider processes information to perform a task for the institution. Read the notice’s own definitions and any limits on a provider’s independent use. A service-provider disclosure can be operationally necessary without being an advertising sale, but it still expands the number of organizations handling the data.
Do not collapse all sharing into one bucket
For every table row, write four entries: data category, purpose, recipient, and whether you can limit it. This exposes gaps hidden by a headline such as “we do not sell your information.” A provider may make that statement while still sharing transaction or experience information with affiliates, supplying data to vendors, and disclosing records when law requires it.
4. Test the opt-out, rather than assuming one exists
U.S. financial privacy rules provide choices for certain forms of sharing, not a universal right to stop every use. The notice should state which choice applies, who can exercise it, when it takes effect, and how to submit it.
Look for these distinct choices
- Affiliate marketing: limits an affiliate’s use of information to market products or services.
- Affiliate creditworthiness information: may concern transaction or experience information used to make eligibility decisions.
- Nonaffiliate marketing: may limit disclosure to unaffiliated companies for their own marketing.
- State, international, or product-specific controls: may provide additional rights or separate preference centers.
Operational processing, fraud controls, transaction execution, tax reporting, regulatory records, and other legally required uses generally are not switched off by a marketing opt-out. Confirm that boundary in the notice.
Document the procedure
- Find the exact channel: account settings, a web form, telephone number, email address, or postal address.
- Note whether the choice applies to one product, one legal entity, or all accounts.
- Check the effective date and any period during which the institution may continue using information while the request is processed.
- Save the confirmation number, email, or screenshot.
- Recheck after a reasonable processing period and ask which categories remain unrestricted.
The Morgan Stanley Investment Management notice describes affiliate-related sharing choices and opt-out information. The Fidelity notice describes sharing for everyday business and its own marketing, says it does not jointly market or share with nonaffiliates for their marketing, and describes sharing certain transaction or experience information with affiliates. Those statements show why the current notice for the particular entity matters; they are not a ranking of providers or a universal rule.
5. Read what happens after you close the account
Closing an account stops new account activity but does not automatically erase records. Financial institutions may need transaction, identity, tax, and communications records for legal, regulatory, fraud-prevention, accounting, or dispute purposes. A notice can also say that its described information practices continue for former customers.
Questions to answer from the former-customer section
- Does the notice expressly say that practices continue after the relationship ends?
- Which records are retained, and is there a stated schedule or only a legal-and-business-need explanation?
- Can former customers still submit access, correction, deletion, or marketing requests?
- Are archived records isolated from routine use, or can they be restored for investigations and legal demands?
- What happens to information held by affiliates and service providers when the primary account closes?
Both the June 2026 Fidelity notice and the March 2026 Morgan Stanley Investment Management notice state that the described practices continue for former customers. That wording does not prove that every category is retained forever; look for a specific retention explanation and ask the privacy contact about the category you care about.
Free tools Windows power users keep installed
One-click scans. No signup required.
6. Translate “Do I own my investment data?” into enforceable questions
“Ownership” can refer to different things: legal title to securities, control of an account, copyright in a statement, or privacy rights in information about you. A privacy notice rarely grants a simple property right in all account data. Evaluate the rights the applicable law actually provides.
| Right | What it may let you do | Limits to check |
|---|---|---|
| Access | Request categories or copies of personal information and details about use or disclosure | Identity verification, security exceptions, confidential business information, and legally protected records |
| Correction | Ask the institution to fix inaccurate identity or profile data | Source-control issues, disputed transaction history, and documentation requirements |
| Deletion or erasure | Request removal of qualifying personal data | Legal retention, fraud prevention, tax and accounting duties, contractual records, and data needed to establish or defend claims |
| Restriction or objection | Limit certain processing or object to particular purposes | Operational, regulatory, or security processing may continue |
| Portability | Obtain certain data in a usable format or ask for transfer to another provider | Usually limited to data covered by the relevant law and technically portable formats |
Rights depend on jurisdiction, the data type, and the entity holding the record. One investor privacy notice filed in 2026 describes U.S. GLBA and Regulation S-P sections alongside GDPR rights and explains that erasure is unlikely for certain data because of its purpose. That is an example of a jurisdiction-specific limitation, not a blanket rule for every investor: investor privacy notice in an SEC filing.
Separate account assets from personal information
Your securities, cash, trade confirmations, tax forms, and personal information can be governed by different rules and held by different entities. A request to delete marketing data is not a request to delete the books and records needed to prove ownership or report a taxable transaction. Ask the provider to identify which record system and legal basis applies to each requested deletion or export.
7. Treat security language as a description, not an audit
A notice tells you what safeguards the institution says it maintains; it does not independently verify that controls work in practice. Record concrete commitments and their scope.
Safeguards worth locating
- Encryption or other protection for data in transit and at rest, if stated.
- Authentication, access controls, segregation of duties, and employee training.
- Rules limiting staff access to account information and monitoring that access.
- Requirements imposed on vendors and third-party support organizations.
- Incident-notification procedures and the channels used to contact customers.
- Physical safeguards for offices, files, and facilities.
Fidelity describes computer safeguards and secured files and buildings. Morgan Stanley Investment Management also describes personnel policies and standards for third-party support. These are representations of stated practices, not evidence from an independent penetration test, certification review, or incident investigation. Compare the specificity of the language, but do not treat a polished notice as proof of implementation.
Best Value
8. Use a repeatable comparison worksheet
When comparing two apps, fill the same fields for each current notice. Do not score one provider from a marketing page and the other from a legal notice.
| Comparison axis | Record for each app |
|---|---|
| Legal entity and product | Exact entity, account type, affiliates, clearing or banking partners, notice date, and jurisdiction |
| Data categories and sources | Identity, financial profile, holdings, balances, transactions, risk data, device data, and third-party sources |
| Purposes | Account servicing, transactions, fraud, analytics, marketing, legal compliance, and corporate events |
| Recipient definitions | Affiliate, nonaffiliate, service provider, joint marketer, regulator, and successor |
| Choice mechanism | Opt-out categories, channel, effective date, scope, and confirmation process |
| Former-customer treatment | Continued practices, retention explanation, archived data, and post-closure requests |
| Individual rights | Access, correction, deletion, restriction, objection, portability, appeal, and exceptions |
| Safeguards | Access controls, employee rules, vendor standards, physical security, and incident notices |
Turn the worksheet into a decision
- Mark each purpose as necessary to operate the account, optional personalization or marketing, or unclear.
- Mark each recipient as an affiliate, nonaffiliate, service provider, regulator, or unknown.
- Highlight any row with no stated limit, no opt-out procedure, or no explanation of retention.
- Ask the provider targeted questions about highlighted rows before transferring a large portfolio or linking external bank accounts.
- Keep the completed worksheet with the notice version and your submitted preferences.
9. Ask precise questions when the notice is vague
Customer support often cannot answer a broad question such as “Do you sell my data?” Use a written request that names the category and purpose:
- “Which legal entity receives my transaction history, and is each recipient an affiliate, service provider, or nonaffiliate?”
- “Is my portfolio or risk-tolerance information used to market affiliate products? If so, which opt-out stops that use?”
- “After closure, which records are retained for legal or regulatory reasons, for how long, and which are removed from active systems?”
- “Can I obtain a portable copy of my personal information, and which categories are excluded?”
- “Which vendors can access my bank or wire information, and what contractual use limits apply?”
Request a ticket number and a written response. If the answer conflicts with the notice, ask which document controls and where the newer language appears.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
10. Understand public disclosure and retention examples correctly
Public regulatory records can illustrate how financial information is disclosed and retained without describing customer brokerage data. The SEC’s Investment Adviser Registration Depository (IARD) privacy impact assessment says a sanitized view is used for public Investment Adviser Public Disclosure (IAPD) information and discusses amendments, redress, and retention of filing history in many cases: SEC Privacy Impact Assessment: Investment Adviser Registration Depository.
IARD is an adviser-registration filing system. Its controls and retention discussion should not be presented as a statement about the records in your investing app, trading account, or portfolio. Use it only to understand that public disclosure and long-term regulatory records can coexist with privacy controls.
11. Common reading mistakes and their fixes
- Relying on “no sale.” Fix: read affiliate, service-provider, legal, and marketing rows separately.
- Assuming one notice covers the whole app. Fix: identify every legal entity and product involved.
- Treating an opt-out as a deletion request. Fix: distinguish marketing preferences from retention and legally required processing.
- Assuming account closure erases history. Fix: find former-customer language and ask about each record category.
- Calling all data “owned” by the customer. Fix: list the access, correction, deletion, restriction, objection, and portability rights actually available.
- Using a provider’s security description as proof. Fix: treat safeguards as representations and seek independent assurance where the provider publishes it.
- Comparing notices from different years. Fix: record revision dates and compare current versions for equivalent products.
- Confusing a regulatory filing system with customer data. Fix: keep IARD or similar public-record examples separate from brokerage-account analysis.
12. A practical decision rule
An investing app’s disclosure is easier to evaluate when you can name the entity making the promise, list the sensitive categories it receives, identify each purpose and recipient, submit a clearly scoped preference, explain what remains after closure, and cite the legal basis for any access or deletion request. If one of those links is missing, treat the uncertainty as a material privacy risk and seek a written clarification before connecting bank accounts or moving investments.
This framework evaluates what the documents say. It is not legal advice and cannot establish whether a provider’s controls operate as described. For a dispute, a suspected misuse, or a rights request spanning several jurisdictions, consult the relevant regulator or a qualified privacy attorney.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
