Skip to main content
Security & Privacy

How Shelter Uses Plaid for Bank Linking

3 min read
How Shelter Uses Plaid for Bank Linking

Plaid is part of Shelter's bank-linking flow, so it is fair for users to ask what that means. The important distinction is this: Shelter can explain how Shelter uses Plaid, but Plaid is the source of truth for Plaid's own security, privacy, and institution-coverage claims.

For Plaid's own materials, start with Plaid's trust and safety page and Plaid Portal. This article focuses on Shelter's implementation.

What Shelter Uses Plaid For

Shelter is a read-only personal finance app. We use Plaid so you can connect eligible bank accounts and let Shelter build cash-flow forecasts, bill alerts, subscription insights, and Guardian AI coaching from real account activity.

In practice, Shelter uses connected data for:

  • Account type and institution metadata
  • Current and available balances when provided
  • Transaction history for forecasting and recurring-charge detection
  • Connection status so we can tell when an account needs attention
  • Alerts and AI coaching based on the timing of bills, income, and spending

Shelter does not use Plaid to move money. Shelter does not initiate transfers, make payments, change account settings, or cancel subscriptions for you.

What Shelter Cannot Do

The most important security boundary is not a slogan; it is a product constraint. Shelter is read-only.

Shelter cannot:

  • Transfer money out of your account
  • Transfer money between accounts
  • Pay a bill
  • Open or close an account
  • Change your bank password
  • Edit bank account settings
  • Cancel a merchant subscription on your behalf
  • Store your bank login credentials

That is why Shelter describes itself as a financial visibility and coaching layer, not a bank, payment app, or money manager.

What Happens When You Connect

When you choose to connect an account, Shelter starts Plaid's connection flow. The bank-login step happens through Plaid and your financial institution rather than through a Shelter-owned credential form.

Shelter receives the read-only data and connection references needed to power the app. We do not receive your bank username or password.

Because financial institutions and Plaid connection flows can vary, users should always review the permission screen during connection. That screen is the most immediate place to confirm what data is being requested for the account you are linking.

How Shelter Protects Connected Data

Shelter's security commitments are about Shelter's systems:

  • Shelter encrypts financial data in transit and at rest.
  • Shelter does not sell financial data.
  • Shelter does not show third-party ads.
  • Shelter is subscription-funded.
  • Shelter limits account access to read-only data needed for forecasts, alerts, and coaching.
  • Shelter lets users disconnect accounts and request deletion according to our privacy policy.

For the legal details, see Shelter's Privacy Policy, Terms, and Security page.

Where Plaid's Own Claims Belong

If you want to evaluate Plaid itself, use Plaid's own materials. Plaid publishes consumer-facing information about account connections, data controls, and safety on its website and in Plaid Portal.

That matters because claims such as institution count, certifications, or Plaid's internal security practices can change over time. Shelter should not paraphrase those as if they are Shelter promises. We should link to Plaid and keep Shelter's own claims precise.

Questions to Ask Any Bank-Linked App

Before connecting a bank account to any app, ask:

  • Does the app clearly say whether access is read-only?
  • Does the app explain what data it collects and why?
  • Does the app store bank login credentials?
  • Can the app move money, initiate transfers, or make payments?
  • Can you disconnect the account later?
  • Does the app sell data or show third-party ads?
  • Are third-party security claims linked to official sources?

Shelter's answers are intentionally simple: read-only access, no money movement, no stored bank login credentials, no data sales, no third-party ads, and Plaid-specific claims routed back to Plaid.

Common Concerns

Is Plaid safe?

Shelter should not answer that on Plaid's behalf. Plaid publishes its own trust and safety information, and users should review it directly. What Shelter can say is that Shelter's use of Plaid is read-only and does not give Shelter the ability to move money.

Can Shelter see my bank password?

No. Shelter does not receive or store your bank login credentials. The bank connection flow is handled through Plaid and your financial institution.

What data does Shelter use after connection?

Shelter uses account and transaction data needed for cash-flow forecasting, recurring bill detection, subscription insights, alerts, and Guardian AI coaching.

Can I disconnect later?

Yes. You can disconnect accounts in Shelter. You can also review Plaid-linked apps through Plaid Portal and, when your bank provides it, through your bank's connected-app settings.

The Bottom Line

Shelter uses Plaid to make read-only bank linking possible. Shelter can explain Shelter's permissions and product boundaries: no money movement, no stored bank login credentials, encrypted financial data, no data sales, and no third-party ads.

For Plaid's own security and coverage claims, go directly to Plaid. That keeps the trust story cleaner, more accurate, and easier for users to verify.

Take control of your cash flow

Shelter connects to your bank, forecasts your balance 30 days out, and alerts you before problems happen.

Related articles