On Saturday, January 11, 2025 at 9:32:19 PM UTC-5 ch...@hasenpflug.net wrote:
SimpleFIN Bridge uses MX, a Plaid-like service, to access your accounts. On Saturday, January 11, 2025 at 8:04:30 PM UTC-6 mtb...@gmail.com wrote: How does SimpleFin connect to accounts ? Does it "know" your passwords ? It does use MX <https://www.mx.com/> per its Privacy <https://beta-bridge.simplefin.org/info/privacy> and Security <https://beta-bridge.simplefin.org/info/security> pages. MX keeps either your passwords or special app-specific keys depending on the security of your banks. I was initially suspicious too given the lack of development in the simplefin org <https://github.com/simplefin>, but it makes sense that it's largely an interface between MX APIs and the SimpleFIN spec; not much to change. For more confidence, SimpleFin had a recent third-party security audit performed by SecurityMetrics. It's also the backend for a buckets budgeting app <https://www.budgetwithbuckets.com/> by the same devs, and that appears to have an active community <https://github.com/buckets/application/issues> ~ extra visibility/scrutiny. -- You received this message because you are subscribed to the Google Groups "Beancount" group. To unsubscribe from this group and stop receiving emails from it, send an email to beancount+unsubscr...@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/beancount/18b9a170-9748-4ad6-b737-52ace393f0d6n%40googlegroups.com.