If I were to parse this comment in a lawyerly way, I'd conclude you didn't actually say whether your service does or does not sell users' financial data (or whether it plans to do so). Can you confirm for us your company's practices?
Additionally, the fact that it's a "VC-backed startup" is irrelevant. Any company with any structure could be doing this.