Is Plaid safe to use?
Yes, for most people. Plaid is a long-established company that passes account data from your bank to the apps you choose, and more than 9,000 apps use it. Plaid says it encrypts data with AES-256 and TLS, and that it does not share your bank username and password with those apps. At many large banks you sign in on the bank's own site, so Plaid never handles your password.
Any company holding financial data carries some risk, and Plaid has settled a privacy lawsuit and disclosed a small data incident, both covered below. The bigger decision is usually which app you link, because that app decides what happens to your data next.
What is Plaid?
Plaid is a technology company that connects your financial accounts to apps. It does not hold your money or provide banking services. When an app sends you to Plaid, you pick your bank, sign in, choose the accounts to share, and Plaid passes that data to the app.
That is why a Plaid screen shows up even though you never signed up for Plaid. Budgeting apps, payment apps such as Venmo, and AI assistants use it so they don't have to ask for your bank login. Plaid says 1 in 2 U.S. adults with a bank account have used it.
Does Plaid see your bank password?
It depends on your bank. Many of the largest U.S. banks use OAuth, which sends you to the bank's own site or app to sign in, so your password stays with the bank. At other banks you type your login into Plaid's window, and Plaid uses it to reach your account. Either way, Plaid says it does not share your username and password with the app.
If your bank opens its own sign-in page, check the address before you type anything, as you would for any bank login. Plaid's documentation names Chase, U.S. Bank, and Wells Fargo among the banks that use OAuth.
If your bank asks for a multi-factor code, you enter it where you signed in: on the bank's own page, or in Plaid's window. Plaid's privacy policy says that when you give it your login, you give it permission to access your bank on your behalf.
What can Plaid see?
That depends on what the app asks for and what you approve. Plaid's privacy policy lists account, balance, credit, loan, investment, and transaction data from your bank, and in some cases payroll and tax data. It also collects identifying details such as your name, email, and phone number, and device data such as your IP address.
You choose which accounts to share on Plaid's screen. An app that only needs to verify your account asks for less than a budgeting app that reads your transactions.
What does Plaid do with your data?
Plaid uses it to provide the service you asked for, to help prevent fraud, and to improve and build its products. Its privacy policy says those products include AI systems. It shares your data with the app you connected and as that app directs, and with banks, service providers, and affiliates. It says it shares with outside companies for their marketing only with your consent or at your direction.
In 2021 Plaid said it does not, and never has, sold data. Its privacy policy, effective December 8, 2025, also says it may use aggregated or de-identified data for any purpose the law allows, such as research and product development.
Plaid's policy governs what Plaid does. The app you connect has its own policy, so read that one too.
What was the Plaid lawsuit about?
Plaid agreed in 2021 to pay $58 million to settle a class action. Users alleged that it collected more financial data than it needed and that its sign-in screen looked like their bank's. Plaid disagreed with the claims, and the settlement was not a finding of wrongdoing. A federal court gave final approval in July 2022, and the deadline to file a claim has passed.
As part of the settlement, Plaid agreed to change some business practices to give people more control over their login details and financial data.
Has Plaid had a data breach?
Plaid disclosed one small incident in 2026. In April it notified people affected by a technical issue with recycled phone numbers, where a number reassigned to someone new could show that person some of the prior owner's profile information. Plaid says it was not an attack and that bank usernames and passwords were never exposed.
The information that may have been visible included names, dates of birth, addresses, driver's licenses, Social Security numbers, and some bank account details. Cyber Daily reported from a filing with Maine's attorney general that 294 people were affected. Plaid says it fixed the issue, removed the incorrectly connected accounts, and offered identity protection at no charge.
Is it safe to use Plaid with ChatGPT or another AI?
Yes, the Plaid step works the same way. ChatGPT Finances, Gemini through Google Wallet, Meta Muse, and Candor all link accounts through Plaid, so your bank password stays out of the chat. The choices that matter come after the link, such as what the AI can do, what stays in your chat history, and whether your chats train its models.
Check those settings in the AI you use, and never type a bank password into a chat. The guides below go through them for ChatGPT and for other assistants.
How do you disconnect an app from Plaid?
Sign in at my.plaid.com with Plaid Portal, open the Overview tab, select the app, go to Manage connections, choose Disconnect app, and finish the confirmation prompts. The app can then no longer get new data through Plaid. It may still keep what it already collected, so ask the app to delete that.
To delete what Plaid itself holds, use the Delete my data link on Plaid's site or email privacy@plaid.com. Plaid says that when an app removes your connection, its systems are designed to delete your personal data, with some exceptions such as other active connections and legal requirements.
You can usually remove the connection in the app as well, and many banks list connected apps in their own security settings.
How does Candor use Plaid?
Candor connects your accounts through Plaid. Candor is read-only and has no tool to move money. Plaid handles the bank sign-in. Candor then gives the AI agent you already use your balances, transactions, investments, and debts, so it can plan from your real accounts.
Tell your agent what you want with your money, and it sets up goals and a budget that pays for them. Every week Candor reviews your finances and tells your agent what's worth talking through and why. Candor does not sell your financial information or train AI models on it, and it records every read and change your agent makes, with the reason.
You can disconnect a bank or revoke an agent at any time, and delete your Candor data from your account. Disconnecting a bank stops new data. Past records stay until you delete them.
How was this page researched?
Facts about Plaid come from its own site, documentation, and privacy policy, its notice to state regulators, and court and news reports on the settlement, checked November 1, 2026. Candor pays Plaid to connect accounts, so we have a stake in this answer. Plaid did not review this page.
Sources are listed below.
Common questions
- Is Plaid legit?
- Yes. Plaid is a real technology company based in San Francisco, and more than 9,000 apps use it to connect bank accounts. A Plaid screen inside an app you trust is a normal part of linking an account. If a message or call asks you to link your bank through a link you did not expect, treat it as a possible scam and go to the app directly.
- Does Plaid sell your data?
- In 2021 Plaid said it "does not, and never has, sold data." Its privacy policy says it shares your financial data with third parties to provide the services you requested or when you consent.
- Can Plaid take money from my account?
- Plaid does not hold your money or provide banking services. It passes data to the app you connected. Some apps, such as payment apps, use that connection to send money when you tell them to. A read-only app such as Candor or Monarch cannot move money.
- Why does my app use Plaid?
- So the app doesn't have to ask for your bank login. Plaid handles the sign-in and passes the app the data you approved.
- Do I need a Plaid account?
- No. You can link accounts through an app without one. A Plaid Portal account is free and lets you see and manage the apps connected through Plaid.
- Should I use Plaid or upload statements instead?
- Plaid suits ongoing tracking, because the data stays current and you can disconnect it. Uploading a statement works for a one-time question, but the file stays wherever you uploaded it, and it holds your account details in full.
Sources
- What is Plaid? Plaid
- How Plaid works for consumers Plaid
- How we handle data Plaid
- End User Privacy Policy Plaid, December 8, 2025
- OAuth guide Plaid
- How do I disconnect my financial accounts from an app? Plaid
- Notice to the New Hampshire Attorney General Plaid, May 11, 2026
- US fintech firm OpenAI is using for linking bank accounts to ChatGPT discloses years-long cyber incident Cyber Daily, May 21, 2026
- Plaid to pay $58 million to settle data privacy class action Bloomberg Law
- $58 million settlement of Plaid consumer privacy class action receives preliminary approval Lieff Cabraser, November 22, 2021
- Plaid settles charges of data privacy violations for $58m Retail Banker International
- Finances in ChatGPT OpenAI