What data a budgeting app receives when you connect a bank
by Lee Schmidt
Published September 20, 2026
A budgeting app receives, through the connection service, roughly what your statement contains for the accounts you chose to share, and nothing that lets it act. It gets each shared account's name, type, and the last digits of its number, the current and available balances, and the transactions with their dates, amounts, merchant names, and pending status, plus the account holder's name and sometimes the address where the bank shares them. It does not get your password, the accounts you left unselected, or the full account and routing numbers, which are part of a different grant for apps that move money. The worked list below is what one checking account sends on the day it is connected, and it is shorter than most people expect.
What is sent, and what isn't
The right column follows from read-only access, which returns data and nothing else; see What read-only access to your bank means. The left column is bounded by the accounts you picked on the consent screen, which is the one place the scope is yours to set.
A worked list, one checking account on the day of connection
Six hundred transactions is roughly two years of activity on this account, and how far back the history reaches depends on the bank: some supply two years, some a few months. The balances are as of the moment of the sync, and the difference between current and available is the pending purchases and any holds; see Why transactions show as pending, and why amounts change for how that resolves.
What the app does with it
The data is the raw material for everything a budgeting app shows. Transactions are categorized, by the merchant string and the amount, and the categories become the budget's totals. Recurring charges are found from the pattern of the transactions, and become the bills and subscriptions list. Balances across accounts become net worth, and the daily sync becomes its line over time. The merchant strings, which are often cryptic on the bank's side, are cleaned into names; see Why merchant names look strange on your statement.
None of that requires the app to hold the password or to be able to act, which is why a budgeting app can be read-only and still do its whole job.
What you can limit, and what you should read
- Choose the accounts on the consent screen. An account you leave unselected sends nothing. A business account or a joint account with someone outside the household can be left out.
- Read the app's privacy policy for what happens to the data once the app has it: whether it is sold, shared, or used for anything other than running the product. The connection's scope decides what arrives; the policy decides what happens next.
- Revoke when you stop using the app, from the bank, the service's portal, or the app, and ask the app to delete what it holds.
- Check the connected-apps list twice a year; see How to see and revoke which apps are connected to your bank.
Common mistakes
- Assuming the app gets everything. It gets the accounts you selected and the fields above, and no more.
- Assuming it gets nothing sensitive. Two years of transactions is a detailed picture of a life, and the privacy policy is where its handling is written.
- Sharing every account by habit. The consent screen is the one place to leave an account out, and it is easy to click through.
- Confusing the merchant string with a category. The bank sends a string; the app decides the category, and you can correct it.
- Expecting statements or check images. They are not part of the data; the transactions are.
Common questions
What information does a budgeting app get from my bank? For each account you selected: its name, type, and last digits; its balances; its transactions with dates, amounts, merchant names, and pending status; and the account holder's name and often the address as the bank holds them. Investment accounts also send holdings. It does not get your password, unselected accounts, or the full account numbers used for payments.
Does the app see my account number? The last few digits, to identify the account. The full account and routing numbers are part of a payment grant that a budgeting app does not request.
How far back does the transaction history go? As far as the bank supplies through the connection, which is commonly up to two years and sometimes only a few months. The history arrives in the first minutes after connecting, and new transactions arrive with each daily sync.
Can I connect only some of my accounts? Yes. The consent screen lists the accounts at the institution, and only the ones you select are shared. An account left out can be added later from the same connection.
Does the app get my Social Security number or my bank login? No. Neither is part of the data a read-only connection returns. The app may ask for identity details of its own for its own reasons, separately from the bank connection, and that is a question for the app's signup, not the connection.
How Zypper handles this
Zypper receives read-only financial data through the secure Plaid window, never your login: you sign in on your bank's own screen and pick which accounts to share, and only those accounts sync. Once connected, transactions and balances sync automatically every day, recent transactions import and are categorized automatically with your edits winning over the automatic choice, and the historical data fills in gradually over the first minutes after connecting; checking, savings, and card accounts feed the budget and cash flow, while investment and loan accounts contribute their balances to net worth. Zypper uses the data to run the product, and does not sell your personal information. See Connecting your bank accounts, Supported account types, and Privacy and security at Zypper for the details, or get started with Zypper to choose which accounts to share.