Linking a bank account is a big ask. Here is exactly what Ledger can and cannot do.
Ledger requests balance and transaction data only. There is no payment or transfer capability in the product.
You approve access at your bank through SimpleFIN Bridge and hand Ledger a read-only token — your bank password is never entered into Ledger.
TLS in transit, encryption at rest, and access tokens kept in server-side secrets that never reach your browser.
Every account, transaction and budget row is scoped to your user id at the database level — not just in the UI.