In September 2007, I commented on a new service called MINT that allows users to keep all their financial information on-line. My biggest concern was giving personal financial information to a 3rd party that isn't a recognized financial institution. I felt that the remote possibility of a security breach, no matter how minuscule, (they use the word "Paranoia" when addressing the concern) meant that you should only keep such information on your own system. Internet fraud and hacking are at an all time high now and if someone managed to get into their servers-well, I don't even want to imagine the chaos but more importantly, what recourse could you have? This is simply an internet company, not a bank or some other kind of financial institution. I never questioned the integrity of the folks at MINT and while I still don't, I wonder why they have chosen to release aggregate data about their clients' spending and saving habits.
The article on TechCrunch which received the data from MINT shows spending and other financial trends that support the fact that the U.S. economy is in a recession. This bothers me for a number of different reasons:
-
What are their users' demographics, incomes, ages etc? How relevant is this data to the total population?
-
While the data is the aggregate of their 900,000 users, you might wonder what other data they are releasing to whomever?
-
Why don't other financial institutions reveal this level of data?
BECAUSE IT's PRIVATE-THAT's WHY
So again, I caution you to think long and hard before you release your bank account numbers, credit card numbers and pins (yes they really ask you for that.) It says on their site they have no access to any of this information but if their security is really that great why don't they have any testimonial statements from known financial institutions that it's OK to let 3rd party financial service companies have access to this information?
If you're a regular reader you know I love technology and new applications on the internet that make our lives easier. In the last year we have learned that no financial institution, government official, financial advisor or Fortune 100 company is invincible to security breaches and/or fraud. I'm sure the intentions of the folks at MINT are honorable, but in my opinion, this type of online application could be a disaster waiting to happen. I can't say it enough-Think long and hard before you put any personal financial information on-line. If you are really interested in beginning to use personal finance software, it
would be of my opinion that the safer bet would be to purchase the software
yourself instead of utilizing online money tracking programs link
Mint.com.
UPDATE: I wrote this article after I read the TechCrunch post but decided not to post it until after I contacted my banker for her comments. She returned my call today and I asked her what would happen if I gave my account and PIN to a
3rd party to access my account online. Her comment? "You can't be serious.
Why would you ever do that? Anyway, we'd put a lock on your account, then contact you
because we'd know it wasn't you." When I asked how, she just chuckled
and said "This is (name of bank deleted because I won't even tell you
where I bank let alone give you my account and pin #.) We know how to
protect our customers." Of course, Canadian banks are much more
conservative than U.S. banks but Canadian banks were declared
the soundest in the world in the World Economic Report in 2008. But
that made me feel better that this application probably can't be used
by Canadian bank customers.