We're using Plaid to connect to accounts so we're not storing any credentials ourselves. For security when we pull the info to give to people in the digest each morning we're not persisting it anywhere.

Interesting point about the CSV (giving us information without bank access); a problem with that though is it defeats the 'push' based idea of giving people information without them having to do any work. Atleast on the consumer side we've found that many people don't keep track of their money because it's too much effort to log in and manually get that information.

Thanks for the feedback!