I did not know about Plaid until today.
https://plaid.com/solutions/transaction-data/
> Our high-functioning platform pulls up to 24 months of data directly from users’ bank accounts.
Whoa. I never agreed to anything like that. How is this legal/why would banks let a startup have this much information?