Is Plaid safe to use? Data collection, security measures, and more

Plaid is a legitimate app that acts as a middleman between your bank and other services. It meets all legal and security requirements but allegedly also harvested and sold user data without consent. This post is for anyone who’s nervous about using Plaid and will examine its privacy policy, data collection practices, and more. I’ll also address the company’s past controversies and current position so you can make an informed decision about signing up.

Is Plaid secure and safe to use?

From a technical perspective, Plaid is highly secure and meets internationally approved standards set out in ISO 27001 and ISO 27701. It also undergoes annual audits (SOC 2 Type II and ISAE 3000) to ensure compliance. With end-to-end encryption, round-the-clock security, and mandatory multi-factor authentication, it’s extremely difficult for anyone to compromise your account.

This app can gather quite a lot of sensitive information. However, the exact data collected depends on how you use the service and what platforms it’s connected to. I’ll cover Plaid’s privacy policy in more detail later, but there’s nothing in there that raises an eyebrow. In fact, Plaid’s data-collection policies are broadly in line with those of rival apps like MX and TrueLayer.

In short, Plaid is safe to use, but it’s up to individuals whether they trust it with their data. Still, there are a few ways you can protect yourself when using Plaid:

• Always link your bank account using OAuth, if given the option. This way, Plaid never has to store your login details or rely on screen scraping.
• Connect apps sparingly. Unless you’re running a business or are deeply involved in finance, you shouldn’t have to use this service very often. Before linking anything, ask yourself whether it’s really necessary and whether the app you’re connecting is actually reputable.
• Know how to spot social engineering attempts. If someone contacts you claiming to need your Plaid login details or multi-factor authentication code, report them. Plaid never initiates two-way conversation via email or text.
• If you’re unsure of anything, contact your bank for assistance. It’s better to be overly cautious than to risk an account breach.

Everything you need to know about Plaid

If you’re going to grant any app access to your financial information, it’s a good idea to understand how it works. I’ll answer the question “is Plaid legit?” by explaining its login process, examining its privacy policy, and checking user reviews.

What is Plaid and how does it work?

Plaid helps you link your bank account to financial apps like expense trackers and budgeting software. It might seem unnecessary but every app that knows your login credentials is another avenue for attackers to target you. That’s why, instead of logging in directly via multiple fintech apps, it’s safer to use a single middleman. Better still, thanks to a technology called OAuth, Plaid doesn’t even save your login details in most cases. Here’s how it works:

1. The user opens an app that supports Plaid and linking their bank account.
   
2. Plaid redirects the user to their bank’s login page, meaning it never sees their account number or password.
   
3. The user logs in, and their bank sends Plaid a secure access token, confirming that their login details are correct. This lets Plaid fetch updated data without needing your credentials in the future.
4. Some banks don’t yet support OAuth. In these cases, Plaid will save your encrypted login details and gather the required information via screen scraping.

What information does Plaid collect and does it sell my data?

Plaid does not sell personal information or biometric data acquired via its identity-verification service. However, it may share data such as your IP address and device location with third parties for advertising purposes. Here’s some of the information Plaid collects:

So why exactly does this app collect this much personal information? There are several reasons, including powering its services, preventing fraud, and fulfilling legal obligations. While Plaid doesn’t sell your data, it does analyze it to improve its features, provide support, send you alerts, and build insights about its users.

Is Plaid trustworthy?

Over 12,000 financial institutions support Plaid integration, and it’s used by major apps like Wave, Rocket Money, Stripe, Venmo, Wise, and SoFi. That’s an overwhelming vote of confidence from the fintech industry.

However, the company’s Trustpilot rating is 1.2 out of 5, with 96% of reviews giving it 1 star. People say unexplained errors are common and it’s difficult to speak to a human when they need help. There are a few other reasons people may find Plaid difficult to trust:

• Previously relied on screen-scraping. Plaid used to log into your bank independently and extract the data it needed. This effectively gave a third party full control over your account. It still uses screen scraping, but thankfully, it’s a last resort now that API usage is more widely accepted.
• Allegedly tricked users. A 2021 lawsuit alleged that the company intentionally designed its login system to resemble those of the user’s bank, allowing it to harvest and sell user data without consent. Plaid denies this but paid $58 million to settle the suit in 2022.
• Exposed user data. In April 2026, Plaid revealed that some customers could view others’ private data due to phone carriers recycling previously used numbers. This issue’s been resolved, but it’s unclear how many users were impacted globally.

Equally concerning, Plaid has created a machine learning system designed to provide context to users’ bank transactions. This is problematic for many reasons, including:

• This feature doesn’t benefit users in any way, only Plaid’s business customers.
• Machine learning algorithms tend to reflect societal biases. Without careful configuration, they risk giving lenders and banks data-driven justifications for discriminating against specific groups.
• Models can infer information from data sets, but in many cases, their deductions can’t be proven. That’s a problem if the AI’s insights are used to assess eligibility for financial services.

Final thoughts

Plaid is safe to use because it’s properly secured and collects only the information it needs to function. However, it has a bit of a checkered past and no problem profiting from its users via data-driven insights into their spending habits. Ultimately, each user will have to decide for themselves how comfortable they are with this exchange.

On the plus side, the service has mostly phased out screen scraping in favor of the more secure OAuth login system. This means using Plaid is certainly safer than handing out your bank’s login details to everyone who requests them. It’s also very widely supported, so it’s likely the only middleman you’ll need across all of your financial apps.

Plaid safety FAQs