You can use the Plaid Portal (https://my.plaid.com) to view what types of data are being shared, to revoke access (to both the apps and Plaid) and delete data stored in Plaid’s systems. You can also put a data deletion request through support.
Not as per my comment above that we don’t, and have not, sold data. https://plaid.com/legal/#consumer-support
Plaid is a financially juicy target that has a lot of customers.
Is this a bug, or are those of use that use certain 3rd parties not able to see our data?
I'm not a fan of Plaid. The core concept is great, but training users to enter credentials (much less banking credentials) into third-party sites is nuts. Nowadays, it would be easy for someone to pivot from a compromise of a random company's web server to impersonating Plaid and pwning most of their customers' bank accounts.
This would be trivial to fix by deprecating their current UI and switching to a small popup or redirecting to a different URL.