Rocket Money
Closing the account does not close the file. Money-laundering and tax rules keep your identity and transaction records for years, and a permission to share your data wherever the law allows covers much of the rest. The holds set by statute are the ones no request can move.
Reported incidents
Privacy group asked the CFPB to investigate its promise never to sell your data
2022-12-07Affected Rocket Money app sign-up and bank linking
In December 2022 the Electronic Privacy Information Center (EPIC), through New York University's Technology Law and Policy Clinic, asked the US Consumer Financial Protection Bureau to investigate Rocket Money, the budgeting app formerly called Truebill. The complaint said the app told users "we'll never sell your data" while the group privacy policy said "Rocket has shared personal information with third parties or Affiliates, in exchange for valuable consideration". It said new users linked their bank accounts through Plaid before they learned the price of most of its services.
People affected typically ask Rocket Money to confirm whether their information was included, and which categories.
The verified route
Where data goes
What Rocket Money likely holds
What banks typically hold about you, from our industry research, the most sensitive first.
Pick a folder to see where it goes.
Most sensitive
Sensitive
Everyday
Where it goes
On Rocket Money's behalf
They handle your data on Rocket Money's instructions. If Rocket Money uses them, a request to Rocket Money should reach them.
Inferred services
Services banks typically use.
Get their own copy
A request to Rocket Money doesn't reach them. Each needs its own, and some keep records under a legal duty.
Inferred practices
What banks typically do with your data, from our industry research.
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.