When you tap "connect your bank" in a budgeting app, you are usually not giving data to the app alone. You are giving it to a data aggregator — a company like Plaid, Yodlee, Tink, or TrueLayer that sits between the app and your bank. And what it can see goes well beyond this month's spending: your full transaction history, account balances, income deposits, the merchants you buy from, and the patterns those reveal about your life. Most people never realize how wide that window is.

What a connected app can actually see

Once you authorize a bank connection, the aggregator can typically read:

Every transaction, often going back months or years — amounts, dates, and merchant names.
Your balances across connected accounts, and how they move over time.
Your income — how much lands, how often, and from whom.
Behavioral patterns — where you shop, when, how often, and what that implies. Transaction data is famously revealing: it can hint at your health, habits, commute, relationships, and more.

In other words, your spending record is one of the most intimate datasets about you that exists, and connecting an app hands a copy of it to at least one more company.

This is not hypothetical

The risk here is not a thought experiment; it has already produced real cases.

Plaid agreed to a $58 million settlement in a US privacy class action, over allegations it collected more consumers' financial data than it needed to provide its service. (Bloomberg Law)
Envestnet's Yodlee, one of the largest aggregators, has faced lawsuits and reporting alleging it sold access to consumers' transaction data.

These companies operate legally and are widely used by reputable apps. The point is not that they are villains — it is that connecting your bank means your financial life is now held, and sometimes monetized, by parties you never chose and cannot see.

Why "it's anonymized" is not the whole story

Companies that share or sell transaction data usually say it is aggregated or anonymized. The problem is that spending data is unusually easy to re-identify. Researchers have repeatedly shown that just a handful of transactions — a few dates and shops — can single out an individual in a supposedly anonymous dataset. "Anonymized" financial data is a weaker promise than it sounds.

The alternative: don't create the exposure in the first place

The most private option is not a better privacy policy — it is not generating the data trail at all. An app that never connects to your bank has no credentials to leak, no aggregator in the loop, and no server-side copy of your entire financial history. You can still track your spending; you just capture it yourself instead of piping your accounts through a third party. See what open banking is for how the connected model works, and our roundup of expense trackers with no bank login for the alternative.

The usual objection is convenience. But the gap has narrowed: modern no-bank apps capture purchases fast enough that you keep most of the automation without ever linking an account.

How Lumi helps

Lumi takes the simplest possible stance on this: it never connects to your bank, so there is no aggregator and no copy of your accounts sitting on a server. You log a purchase in about two seconds with Back Tap, or let Apple Pay purchases import, or scan a receipt, and your data stays on your device. You still get categories, budgets, 150-plus currencies, and an AI month-end forecast — without handing your financial history to anyone.

Ready to take control of your spending?

Download Free on App Store

Frequently asked questions

Do budgeting apps sell my data?

Some do, and some aggregators behind them have been accused of sharing or selling transaction data. Even when data is not sold, connecting your bank means at least one extra company stores a detailed copy of your financial history. Policies vary, so it is worth reading them — or avoiding the exposure entirely.

Is open banking safe?

It is designed to be safer than sharing your password directly and is regulated in many regions. But "safer than the worst option" is not the same as private: the connected model still requires sharing your transaction data. See what open banking is.

How can I budget without connecting my bank?

Use an app that captures spending manually or semi-automatically — through Apple Pay, receipt scanning, or a quick tap — and keeps data on your device. You trade a few seconds of logging for keeping your financial life to yourself.

Is anonymized financial data really identifiable?

Often, yes. Studies have shown that a small number of transactions can uniquely identify a person, which is why "anonymized" spending data offers weaker protection than the label suggests.

The takeaway

Connecting a budgeting app to your bank quietly enrolls you in a data pipeline most people never see. If that trade does not sit right with you, the cleanest fix is to never create the trail — track your spending without linking an account at all.

This is general information, not financial advice.