Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
FREEDOM251

Freedom251 › Blog › bank security

How to Revoke Third-Party App Access to Your Bank Account

By Freedom251 Team · · 14 min read

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To disconnect an app from your bank account, revoke the authorization where it was created: your bank’s security or data-sharing center, the app’s connection settings, or an aggregator such as Plaid Portal. Then ask the app to delete financial data it already copied. Deleting the phone app or changing your bank password alone may not end token-based access. Save proof of the revocation and watch your statements for unfamiliar activity.

First identify how the app connected

The correct revocation path depends on the connection method. Check the app’s authorization screen, privacy notice, email confirmation, or your bank’s security page. Look for terms such as OAuth, API, data sharing, linked app, Plaid, or credential verification.

As an Amazon Associate I earn from qualifying purchases.

Connection type What normally controls access What revocation stops Data already collected
Bank OAuth authorization The bank’s Security Center, linked-app list, or data-sharing controls; the app may also have a disconnect setting Future access granted through that authorization Not necessarily deleted; request deletion from the app
Bank API or token connection The bank’s third-party-access control or the service’s connection settings Future API requests using the authorization Usually remains in the service until its retention or deletion process is used
Aggregator connection, such as Plaid The aggregator’s portal plus the bank or app controls, depending on the setup Future data retrieval through the aggregator Plaid says disconnecting does not erase data already held by the app
Credentials supplied directly to a service The service’s connection-removal process and, if exposure is possible, your bank’s password and security controls Access using the supplied credentials after they are changed or disabled Previously copied transactions or identity data may remain

OAuth lets you authorize a third party without handing that third party your bank password. A credential-based connection is different: the service may have handled the login details themselves or through a provider. That distinction determines whether a password change is relevant, but it does not replace a formal disconnect.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Also determine the scope of the permission. Some connections are read-only and retrieve balances or transactions. Others can support bill payment, account verification, debit, or transfer functions. A data-sharing revocation may not cancel a separate payment authorization, so list every permission shown in the bank and service accounts before you begin.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

Use this revocation workflow

1. Record the service and accounts involved

Write down the app’s exact name, the financial institutions and accounts it could see, and whether it could only read information or also use a payment or transfer feature. If you connected the same app to more than one institution, treat each connection separately. Keep any authorization email or screen because it may identify the controlling provider.

Note the date and approximate time you start. If a household member or joint account is involved, confirm that you have authority to change the connection. A connection can remain active on one institution even after you remove it from another.

2. Revoke access in your bank’s official controls

Sign in through the bank’s official website or mobile app, not through a link in an unsolicited message. Search for labels including Security Center, Linked apps, Connected services, Data sharing, Third-party access, or Authorized applications. Open the entry for the service and choose the bank’s Revoke, Disconnect, or equivalent action.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Menus differ by institution and account type. Plaid gives Chase as an example in which customers must use the Chase Security Center to revoke or limit Plaid access. If the bank lists the connection but offers only a limitation, apply the strongest available restriction and contact the bank for the complete revocation path.

Read the confirmation carefully. It should identify the service, institution, and permission being changed. A control that says “limit sharing” may reduce the categories or frequency of data without ending the authorization. If the bank offers separate entries for checking, savings, credit card, or loan accounts, review each one.

3. Remove the bank connection in the service itself

Sign in to the third-party service and open its Account, Privacy, Connections, Linked accounts, or Data sharing settings. Select the bank connection and choose Remove, Disconnect, or Stop sharing. Complete any confirmation screen.

This step matters even when you have already revoked at the bank: the service may retain a record of the connection, refresh attempts, or data that was previously imported. If there is no self-service control, use the service’s support or privacy channel and make two separate requests:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Stop making any further requests for data and cancel the authorization.
  • Delete financial information and other personal data collected from the account, subject to any retention that the service is legally required to keep.

Ask the service to confirm whether it has any other connection to the same institution, such as a second login, a backup aggregator, or a payment processor. Removing one listed account does not necessarily remove another.

4. If Plaid was involved, use Plaid Portal

Plaid’s documented consumer workflow is:

  1. Sign in to Plaid Portal.
  2. Open Overview.
  3. Select the app you want to disconnect.
  4. Scroll to Manage connections.
  5. Choose Disconnect app.
  6. Review the result, select the relevant financial institution, and confirm Disconnect.

Plaid describes this action as stopping the app from accessing additional data through Plaid. It does not automatically erase transaction history, identity information, or other records the app already stored. Send the deletion request directly to the app as well.

For some revoked Plaid OAuth items, Plaid documents an approximate transition to ITEM_LOGIN_REQUIRED after 24–48 hours. That is an aggregator-specific implementation state, not a guaranteed timetable for every bank or service. A connection that still appears during that interval should be checked again after the stated period and reported to the relevant support team if it remains active.

Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

If several apps appear in Plaid Portal, disconnect only the one you no longer trust unless you intentionally want to stop all listed services. Keep a screenshot of the selected app and institution before confirming, since similar app names can make an incorrect selection difficult to spot later.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

5. Request deletion of previously collected data

Revocation and deletion are different operations. Revocation is intended to stop future access; it does not by itself remove a transaction history, account identifiers, income records, identity information, or copies stored in backups or risk systems.

Use the app’s privacy request form, account settings, or support address. State the date you revoked access, identify the institution and account connection without sending a full account number, and ask what data will be deleted, what must be retained, and when deletion will be completed. Keep the request and the reply.

Subject: Revoke bank authorization and delete collected data

I revoke your authorization to access my financial account effective [date].
Please stop all further requests, remove the linked institution from my account,
and delete financial and personal data collected from that connection where you
are permitted to do so. Please confirm the revocation date, any data retained,
and the applicable retention period.

Do not email a complete account number, online-banking password, one-time code, or security answer to request deletion. The institution and the last four digits, if needed, are generally enough for support to identify the connection. Follow the provider’s identity-verification process through its official site.

6. Save evidence of the change

Keep the confirmation page, email, ticket number, date and time, and a screenshot showing the connection as disconnected. Record whether the bank, the app, and an aggregator each confirmed a separate action. Evidence is useful if the service continues requesting data or if an unauthorized transfer appears later.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Store the evidence somewhere you can access if the app account is closed, such as a secure password-manager note or an encrypted file. Do not rely on a disappearing in-app notification. If support promises deletion later, calendar a follow-up date and retain the request number.

7. Monitor the account after disconnecting

Review recent statements before and after the revocation. Look for unfamiliar transfers, withdrawals, payment instructions, or new authorization notices. If you see an unrecognized transfer, notify the bank immediately and follow its unauthorized-transaction process. Consumer Financial Protection Bureau guidance says consumers can dispute and recover unauthorized transfers when they notify the bank within the applicable timeframe; the precise deadline depends on the transaction and account type.

Continue checking statements for the period your bank recommends. A revocation blocks future authorized retrieval but cannot reverse a transfer that was already initiated. Ask whether the bank can place alerts on new external transfers, debits, or linked-account changes while the issue is investigated.

Compare the available revocation paths

Use the path that controls the authorization, and use more than one path when the connection involved multiple providers.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Where you act Best use Limitation
Bank security or data-sharing center Ending an OAuth, API, or listed third-party authorization at the data provider The bank may not delete copies already held by the app
Third-party app settings or privacy team Removing the connection from the service and requesting deletion The service may not control a separate bank or aggregator token
Plaid Portal Stopping Plaid-mediated retrieval for a selected app and institution It does not erase data the app already collected
Password and security controls Containing risk when credentials were shared or exposed A password change may not invalidate OAuth or API authorization

The strongest closeout is a matching record at the controlling provider, the app, and any aggregator. If one party cannot identify the connection, give it the exact app name, institution, account type, and date shown in your confirmation rather than guessing at a provider.

Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

What revocation does—and does not—change

A successful disconnect should prevent new requests made under the revoked authorization. It does not guarantee that historical data disappears, that a service has closed your account, or that a separate payment authorization has been canceled. Check the app’s terms and settings for payment, debit, transfer, or recurring-withdrawal permissions and cancel those separately when they are listed.

If an app used more than one provider, one action may not cover every path. For example, removing a Plaid connection may stop Plaid retrieval while a separate direct authorization remains. The bank’s linked-app list and the service’s own connection list should both be clear before you consider the job complete.

Revocation also does not undo a consented transaction history that the service already analyzed, copied into a report, or shared under its terms. Ask specifically about backups, fraud-prevention records, legal holds, and retention periods. The service should tell you which categories it cannot delete and why.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Why deleting the app or changing your password can fail

Deleting the phone app

Removing an app from a phone deletes local software, not the authorization held by the bank, aggregator, or service. The CFPB states: “just deleting an app from your phone doesn’t stop your data from being shared.” Use the revocation controls described above, even if the app is no longer installed.

Changing a bank password

A password change may invalidate a credential-based login, but it may not revoke a separate OAuth or API token. The CFPB warns that changing a bank password may not always remove a service’s access when a separate token or authorization is being used. Change the password when credentials were shared or could have been exposed, then still revoke the authorization through the bank, aggregator, or service.

After changing a password, sign out other sessions if the bank offers that feature, review recent security notices, and enable available multifactor authentication. Never give a support representative a one-time code unless the bank’s official process specifically requires it; unsolicited requests for codes are a warning sign.

Troubleshoot a connection that will not disappear

The bank shows no linked-app entry

Check the app’s authorization details to determine whether it used an aggregator or direct credentials. Look in the aggregator portal, remove the connection in the app, and ask the bank’s fraud or digital-banking team to identify any active third-party authorization. Use only contact details from the bank’s official site or statement.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Some institutions show only currently active permissions, while an app may still display a historical connection in its own interface. Ask the bank whether the listing is active, read-only, pending removal, or merely an account record. Request a case number for any investigation.

The app has no disconnect button

Send a written request through its support or privacy channel. Ask for immediate cessation of access, cancellation of authorization, deletion of collected data, and written confirmation. If the service does not respond, provide the saved evidence to your bank and ask what additional block it can place on the connection.

Keep copies of bounced emails, unanswered tickets, and automated replies. They show when you attempted to revoke access and help the bank or a regulator understand the timeline.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

Plaid Portal shows the app after you disconnected it

Check that you selected the correct financial institution and completed the final Disconnect confirmation. Allow the documented 24–48-hour transition for applicable OAuth items, then check the bank and app controls again. A Plaid disconnect does not remove data already stored by the app, so a visible historical record does not necessarily mean that new access is still occurring.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

You shared credentials with the service

Change the affected bank password immediately, sign out other sessions if the bank offers that control, and enable available multi-factor authentication. Tell the bank that credentials were shared and ask whether it recommends replacing security questions, tokens, or account numbers. Continue with formal authorization revocation and statement monitoring; password changes alone are not a complete response.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Special care for budgeting and cash-advance services

Budgeting tools often request transaction and balance data, while cash-advance or payment services may request additional information or a way to initiate repayment. Before disconnecting, note whether the service has an outstanding balance, scheduled debit, pending transfer, or employer-linked repayment arrangement. Revoking data access does not automatically settle a debt or cancel a payment instruction. Contact the service and the bank separately to cancel or replace any payment authorization, and keep confirmation of each change.

If you need the service’s historical records for tax, dispute, or repayment purposes, download what you are entitled to retain before requesting deletion. Ask the service which records it must keep and for how long rather than assuming every copy can be erased immediately.

Do not assume that closing the app account cancels a scheduled debit. Look for separate recurring-payment, debit-card, ACH, or employer-pay settings. If a payment is pending, ask both the service and bank whether it can still be stopped and what deadline applies.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Regulatory context in the United States

CFPB Regulation 1033.331(e) recognizes a reasonable consumer method for revoking a third party’s authorization. When a consumer uses that method, the data provider must revoke access and notify the third party in a timely manner. The CFPB’s final-rule explanation says the process should be simple and straightforward, access should end immediately after revocation, and deletion should be the default practice. It also describes a one-year maximum access period without express reauthorization.

Implementation and litigation status can change, and the rule’s application may depend on the institutions and services involved. Do not treat the federal description as a guarantee that every current bank interface works the same way. Use the bank’s current controls and obtain written confirmation from the provider. State privacy laws, contract terms, and legally required retention can also affect what a service may delete.

Questions to ask customer support

  • Which provider currently holds the authorization: the bank, your company, or an aggregator?
  • Is the permission read-only, or can it initiate debits, transfers, or other payments?
  • What exact date and time will requests stop?
  • What data was copied, and what categories must be retained?
  • How do I request deletion, and when will you confirm completion?
  • Are any other institutions or accounts linked under the same profile?

Ask the representative to put the answer in writing and provide a ticket number. Precise answers help distinguish a live authorization from a historical record.

When to contact the bank urgently

  • You see a transfer, withdrawal, or payment you did not authorize.
  • You supplied credentials to a service that suffered or may have suffered a breach.
  • The service continues to request data after you have saved revocation confirmations.
  • You cannot identify which provider is accessing the account.
  • Your password, security answers, one-time codes, or account details may have been exposed.

Use the bank’s official fraud or customer-service number, explain when access was revoked, and provide the confirmation evidence. Ask what additional blocks, credential replacements, or account monitoring it recommends.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A practical definition of “disconnected”

You can treat the connection as addressed only when the authorization has been revoked at its controlling provider, the app has been told to stop access and delete retained data, any separate payment permission has been handled, and you have confirmation to keep. Continue checking statements for the period your bank recommends, because revocation prevents future authorized retrieval but cannot undo activity that already occurred.

For a final check, compare the bank’s linked-app list, the aggregator portal, and the service’s connection page. Each should show no active permission or should clearly state that access is disabled. Keep your evidence with the date, and revisit the account if the provider reports a delayed status change.

Frequently Asked Questions

How do I disconnect an app from my bank account?

Identify whether the connection uses the bank, an aggregator such as Plaid, or credentials supplied directly to the service. Revoke it in the bank’s Security Center or data-sharing page, remove it in the app, and use Plaid Portal when applicable. Then request deletion of data already collected and save confirmations.

How do I revoke Plaid access?

Log in to Plaid Portal, open Overview, select the app, choose Manage connections, select Disconnect app, choose the financial institution, and confirm Disconnect. This stops future Plaid retrieval but does not delete data the app already stored; request deletion from the app separately.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Will deleting the app stop access to my bank?

No. Deleting the phone app removes local software but does not cancel authorization held by the bank, aggregator, or service. Use the bank, app, and aggregator revocation controls instead.

Does changing my bank password disconnect a budgeting app?

Not necessarily. A password change may affect credential-based access, but OAuth or API tokens can remain valid. Change the password if credentials were shared or exposed, then formally revoke the authorization and monitor the account.

How do I stop a cash-advance app from seeing my transactions?

Revoke the data connection at the bank or aggregator and remove the linked account in the cash-advance app. Separately handle any scheduled debit, pending transfer, or repayment authorization; stopping data access does not settle a balance or cancel a payment.

How long does Plaid disconnection take?

Plaid documents an approximate 24–48-hour transition to ITEM_LOGIN_REQUIRED for some revoked OAuth items. That timing is not universal. Check again after the interval and contact the bank, app, or Plaid if active access appears to continue.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Does revoking access delete my transaction history?

Usually not automatically. Revocation is intended to stop future requests. Ask the service’s privacy channel to delete transaction, identity, and other data it collected, and ask what records must be retained and for how long.

What should I do if an unauthorized transfer appears after revocation?

Notify the bank immediately through its official fraud channel and follow its unauthorized-transaction process. Provide the revocation date and saved confirmations. Applicable dispute and recovery deadlines depend on the transaction and account type.

The Bottom Line

Revoke the authorization at the provider that controls it, remove the connection in the app and Plaid Portal when relevant, and separately request deletion of stored data. Handle payment permissions, save written proof, and monitor statements for unauthorized activity.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

bank securitydata sharingfraud preventionOAuthPlaidPrivacy

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.