I've wondered about this for a long time. It also appears to be in direct contravention of the terms of service for my bank (which mint doesn't support anyway so that's moot), which state that my access information is strictly personal. I wonder if mint ever got hacked and this led to damage for their customers what the liability situation would be.