Barnacle

Why subscription trackers want your bank login

Last updated: 16 August 2026

The short answer is that finding your subscriptions automatically is impossible any other way. Apple and Google will not tell a third-party app what you subscribe to, and no company sends a list of its customers to a tracker. The only record of every recurring charge you pay is your bank account, so an app promising to find them for you has to read it.

That much is straightforward. What follows from it is worth understanding before you connect anything.

You cannot share only the subscriptions

A recurring charge is not labelled as one. It looks like an ordinary transaction that happens to repeat, and the only way to know it repeats is to compare it against every other transaction. Detection needs the full history, so the full history is what gets shared: rent, salary, medical payments, everything.

There is no version of this feature that reads a narrow slice. The breadth is the mechanism.

The aggregator in the middle

Almost no tracker connects to your bank itself. They use an aggregator, a company sitting between thousands of apps and thousands of banks, translating one into the other. Plaid is the name you are most likely to see, and there are several others.

Two things follow. First, your data passes through a company you did not choose and whose policies you did not read, in addition to the app you did choose. Second, the aggregator's own business is built on that flow, so its incentives are its own.

The better connections now use bank-issued tokens rather than storing your password, which is a genuine improvement, and the large banks have pushed hard for it. The access is still broad, and it is still ongoing rather than a one-time read.

Who pays for the app

Follow the money and the design makes sense.

None of these makes an app dishonest. A company that tells you it charges $9 a month and then charges you $9 a month has done nothing wrong. The point is that free access to your financial history is never free, and knowing which of the three you are paying with lets you judge the trade.

How to judge it

If you want the forgotten charges found for you, the bank link is the price and there is no way around it. Before connecting, three things are worth checking:

Revoking matters more than granting. Access granted once stays live until someone ends it. Deleting the app does not end it, in the same way deleting an app does not cancel its subscription.

The other option

You type them in. It takes about ten minutes for a dozen subscriptions, and after that the app has what it needs to do the two useful jobs: one total that says what you pay each month, and a warning before the next charge lands. Neither job needs your bank.

That is the whole design of Barnacle. There is no backend, no account, and no sign-in. Your subscriptions live in a database on the phone and are never uploaded. The only network call the app makes is the App Store billing check when you unlock it, and a check in the build pipeline fails the release if any code in the app reaches for the network, which is how I keep the claim honest rather than asking you to take my word for it.

What you give up is real: no automatic detection, and no cancelling on your behalf. If those are what you want, a bank-linked app is the right tool and you should use one knowingly.

Barnacle on the App Store