This may be driven by TD's suit against Plaid

From this source https://www.lexology.com/library/detail.aspx?g=8f56092c-ab40...

"Users have complained that after connecting their bank accounts, Plaid stores their credentials and uses them to collect 5 years’ of transactional data and continues to track users’ data in future. Users further claim that the data-gathering scheme is not incidental to Plaid’s business model and is, in fact, its “very purpose.”