not a bad article, but title is clickbait. The startup is asking for YOUR payroll login information to specific set of "gig economy" employers - like Lyft, Uber, and Starbucks. It's basically trying to build a profile for gig works so that gig works can have an easier time showing their earnings. I'm guessing they sell the data also.

The startup itself is actually trying to do a good thing it seems, and while handing out those login credentials isn't ideal, don't forget that Mint & Plaid straight up ask for your banking login and no one bats an eye.

IMHO, the real regulation that is needed is that anyone whom stores data on an individual should also make that data read accessible via an api with separate credentials. Could you imagine a world where you could easily decide how your own data is used?