Do Budgeting Apps Sell Your Data? How to Check and Opt Out

By the Budget-Time editorial team · Published July 24, 2026 · Updated July 29, 2026 (tightened claims, added sources, revised the deletion template and disconnection steps)

Direct answer: practices vary by app. Some finance apps use transaction data only to operate the service; others use data or profiles for financial-product offers, analytics, advertising, or partner arrangements, as disclosed in their privacy policies. Uninstalling an app does not necessarily close your account or disconnect your bank. To fully opt out you generally need to disconnect the bank link, close the account, and submit an access or deletion request where applicable law or company policy provides one.

What connected finance apps can collect

When you connect a bank account to a budgeting or credit-monitoring app, the company can receive, depending on scopes and provider:

• Transactions: merchant, amount, date, and category, often up to two years of history on first link.
• Balances and account types across checking, savings, cards, loans, and investments.
• Income patterns: payroll deposits can reveal employer, pay frequency, and raises.
• Life signals: transaction streams can reflect medical visits, legal services, and other sensitive activity.

How that data can be used

Free personal-finance apps still have operating costs. Depending on the app, revenue may come from subscriptions, advertising, referrals, financial-product offers, partner arrangements, or permitted uses of aggregated information. Privacy policies commonly distinguish among personally identifiable information, service-provider sharing, affiliate sharing, targeted advertising, and aggregated or de-identified information, and the definitions and permitted uses vary by company. Two things worth knowing as you read a policy:

• Offer targeting: some apps use your financial profile to decide which cards, loans, or insurance products to show you, and are paid when you sign up. The disclosures live in the privacy policy and in "how we make money" pages.
• "De-identified" data is weaker than it sounds: academic research (for example, de Montjoye et al., Science, 2015) has shown individuals can sometimes be re-identified from supposedly anonymous transaction data.

Also relevant: the CFPB's Personal Financial Data Rights rulemaking under Section 1033 addresses consumer control over financial data held by providers. Its requirements and timelines have evolved; check the current status.

Step 1: find out what an app holds

Residents of several U.S. states (including California, Colorado, Connecticut, Virginia, and Texas) have rights to access, correct, delete, or opt out of certain uses of personal information. Coverage, exemptions, verification requirements, and response deadlines vary by state and by company; some financial data can be exempt under federal or state financial-privacy laws. California businesses generally have 45 days to respond to qualifying requests, with a possible extension (California Privacy Protection Agency FAQ). Look for a "privacy request," "privacy center," or "Do Not Sell or Share My Personal Information" link in the app's site footer.

Step 2: turn off collection at the source

1. Disconnect the institution inside the finance app first. Uninstalling the app alone may leave the server-side connection syncing.
2. Review your bank's connected-app or data-sharing page. Many banks now show third-party access and let you revoke it there.
3. Review Plaid Portal (my.plaid.com) if the app used Plaid. It can show and disconnect certain connections, though it may not display every one, so treat it as a supplement to steps 1 and 2 (Plaid's guide).
4. Toggle off sale/sharing and targeted advertising in the app's privacy settings; under most state laws these are separate from deletion.
5. Close the account if you are leaving.
6. Submit an access, deletion, or opt-out request where applicable, and keep the confirmation.

Step 3: the deletion request

Submit through the company's privacy portal or the address in its privacy policy. Template:

Expect some data to survive deletion for legal reasons such as fraud prevention and accounting records; the response should say so. If a covered company ignores a valid request, you can complain to the California Privacy Protection Agency (California) or your state attorney general.

Step 4: don't rebuild the problem

Questions to ask any finance app before connecting a bank:

• Where is my transaction data stored, and who can read it?
• Does revenue come from subscriptions, or from offers, advertising, or data arrangements?
• If I cancel, what happens to my data and to my records?

Budget-Time's answers: it is designed not to persist transaction records, balances, investment holdings, or account numbers in its application database. Data flows through its server to your Google Sheet, and the service retains encrypted connection tokens and limited operational and subscription information needed to operate (the privacy policy lists exactly what). Your bank, Plaid, and Google maintain records under their own policies; no tool changes that. Revenue is a flat subscription, and if you cancel, the spreadsheet and every number in it stays in your Google account. For the full playbook, read How to Keep Control of Your Financial Data.

Sources

• California Privacy Protection Agency: FAQ
• CFPB: Personal Financial Data Rights (Section 1033)
• Plaid Portal and Plaid: disconnecting financial accounts
• de Montjoye et al., "Unique in the shopping mall: On the reidentifiability of credit card metadata," Science 347(6221), 2015

Related guides

• How to Keep Control of Your Financial Data
• How to Make a Monthly Budget That Actually Works
• How to Rebuild Credit: 12-Month Plan and Dispute Guide