I’ve been trying to delete as many online accounts as possible to reduce the threat of my personal information / duplicate passwords / my cell number getting out there. I know, it’s probably not worth the effort but it does at least clean up my password manager and MFA app.
I’ve tried had trouble getting my personal information scrubbed and my account deleted at Robinhood and LendingTree. Both have policies that claim they’re unable to delete user accounts due to federal regulations.
Here’s the bit from Lending Tree: https://www.lendingclub.com/legal/privacy-policy
Data Retention: Due to the regulated nature of our industry, we are under legal requirements to retain data and are generally not able to delete consumer transactional data, credit or deposit account application data, or other financial information upon request. Certain regulations issued by state and/or federal government agencies may require us to maintain and report demographic information on the collective activities of our membership. We may also be required to maintain information about you for at least seven years to comply with applicable federal and state laws regarding recordkeeping, reporting, and audits. Criteria used to determine the period of time information about you is retained are primarily related to legal requirements and usefulness of the information for the purposes it was collected.
In both of these cases, I haven’t used the account in many years (RH: 2020, LT: 2018). It serves no purpose to maintain this account other than to exist as data for some malicious actor to acquire and act upon.
With data leaks happening practically every day, I’m really not comfortable with financial agencies with varying degrees of security keeping my information forever. I would think it would be in their own best interest to comply with a deletion request to prevent anyone from scamming them.
Also, I can’t tell you how many websites I’ve lost access to because my phone number was tied to log in. I previously had a company-issued cell phone and not longer have access to that. Any website that requires a phone number for MFA is just horrible. I’m trying to sign into another financial site now and apparently I’m not able to do so without a phone number I had eight years ago.
Wondering if anyone is familiar with this federal regulation that requires they hold on to this information and if there’s some sort of way around this either with a lawyer or federal form or something.
That would be something the company would need to answer.
I know a regular bank would need records for at least 7 years after closing an account so they have a record the account was closed, even if you had no other activity. An online account might need to be deactivated or closed or whatever term they use for ‘can’t do anything with the account’ for 7 years if they treat that like closing an account.
Contacting their support would be the only way to get a clear answer on their policy and how it applies to your account, and then talk to a lawyer if you don’t agree with their policy.
I’m imagining them logging your call then saying 7 years from the last record. If they follow up internally a couple weeks later, when you call back 7 years later they can repeat the process.
I’m feeling cynical today.
Thank you.
And every time you contact them, the clock resets, probably. They will never give up your data. That’s their bottom line.