How we protect you

We never see your bank password

When you connect your bank, you log in directly through Plaid — a separate, dedicated service whose only job is to securely connect financial apps to banks. ScionHome never sees your username, password, or one-time codes. They go from you directly to Plaid, and Plaid handles everything from there.

Plaid is trusted by Venmo, Robinhood, Betterment, and thousands of other apps. It's the industry standard for this kind of connection.

You can revoke ScionHome's access to your bank at any time — directly through Plaid at my.plaid.com, without going through us at all.

Read-only access

ScionHome has read-only access. That means we can see your transactions to find home-related bills — things like your insurance payment, cable bill, or HOA fee.

We cannot move money, make payments, or change anything in your account. This is a hard technical limit enforced by Plaid — read-only access tokens are all we ever receive.

Your data is encrypted

• In transit: All communication between your browser and ScionHome uses TLS encryption — the same standard as your online banking.
• At rest: Your data is stored in Supabase, encrypted with AES-256.
• SOC 2 certified: Supabase holds SOC 2 Type II certification, meaning its security practices are independently audited annually.
• Bank token: The Plaid access token that links to your bank is stored encrypted server-side and is never exposed to your browser or any third party.

What we do not do

• We do not sell your data to third parties
• We do not use your data for advertising
• We do not share financial data with insurance companies or lenders without your explicit consent
• We do not store your bank login credentials

Questions

hello@scionhome.com

We read every email.

For the full legal version of our data practices, see our Privacy Policy and Security pages.