There must be some confusion on my part, because I consider this product (https://plaid.com/products/income/) as selling the income data, I'm guessing it's unrelated to Coinbase.

In any case, are you able to unequivocally state that you do not collect this data for coinbase users, even if it's not for reselling? I know you might have good intentions, but there's no telling where that data will end up once it's collected (past the point of your 'exit' event).