It depends on the type of integration Plaid has with your account provider. In most circumstances you will be redirected to your payment account provider’s website or mobile app to authenticate yourself before we access your account information. In those situations, Plaid does not have access to your credentials.
Alternatively, in some circumstances, we may ask you to provide your login details to access your account information from your payment account, and we will then use those details to directly access and retrieve information from your payment account provider.
All data at Plaid is stored securely with object and volume-level encryption. In addition, Plaid enforces strong access and authentication layers throughout our technology stack, and our API and all related components are monitored continuously by an on-call team. You can read more about how Plaid handles data here.