This happen more often than most people realize. Especially in the accounting tech space. Take a look at HubDoc (which Xero accounting acquired for ~70m) and t

This happen more often than most people realize. Especially in the accounting tech space. Take a look at HubDoc (which Xero accounting acquired for ~70m) and their practices of asking accountants to share their clients login credentials + challenge questions to every online service they want "automated" instead of using OAuth. Their FAQ even encourages this "Hubdoc will have all of the information it needs to connect and fetch your documents": https://support.hubdoc.com/hc/en-us/articles/360007260052-Why-do-I-keep-getting-security-questions- https://support.hubdoc.com/hc/en-us/articles/360007260052-Wh... As for bank feeds, no one has solved this the right way. Not even Plaid. Scrapers are not the answer. Maybe open banking standards like already happening in Commonwealth countries? Or a dropbox like app that lives on the user's machine and that does all the scraping without giving away the login credentials to other actors.