Dave
Closing the account does not close the file. Money-laundering and tax rules keep your identity and transaction records for years, and a permission to share your data wherever the law allows covers much of the rest. The holds set by statute are the ones no request can move.
Reported incidents
Customer records stolen after a former service provider was breached
2020-07-25Dave, a US banking and cash advance app, said on 25 July 2020 that customer data had been stolen. An attacker who breached a former service provider, Waydev, reached Dave's systems between 23 June and 1 July 2020. The data included names, email addresses, phone numbers, birth dates, home addresses, gender, hashed passwords and encrypted Social Security numbers, and was later offered for sale or download online. Dave said bank account numbers, card numbers and records of financial transactions were not affected. Banking Dive reported that 7.5 million users were exposed.
People affected typically ask Dave to confirm whether their information was included, and which categories.
The verified route
Where data goes
What Dave likely holds
What banks typically hold about you, from our industry research, the most sensitive first.
Pick a folder to see where it goes.
Most sensitive
Sensitive
Everyday
Where it goes
On Dave's behalf
They handle your data on Dave's instructions. If Dave uses them, a request to Dave should reach them.
Inferred services
Services banks typically use.
Get their own copy
A request to Dave doesn't reach them. Each needs its own, and some keep records under a legal duty.
Inferred practices
What banks typically do with your data, from our industry research.
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.