Here’s an article from Wikipedia on controversy around the privately held San Francisco startup called Plaid:
“The company has faced controversy for scraping user data, impersonating bank login screens, and not properly disclosing the privacy risks associated with the service.[34] TD Bank filed a lawsuit against Plaid in 2020 accusing the company of trying to "dupe" its users.[35]
In 2021, Plaid settled a $58 million class action lawsuit over claims that it passed on personal banking data to third party firms without user consent. The settlement encompasses five separate lawsuits combined as one. Each claims that Plaid used consumers’ banking login credentials to gather and distribute detailed financial data without prior consent.”