Hi, cofounder of Simple here.
From a regulatory perspective, we're a lot like a prepaid card. It's a well-known model that banking authorities, legal experts, and the government is comfortable with. You probably already use financial products that work similarly to the way we do.
That said, we hold ourselves to the same security standards that "real" banks do. I'd like to think we're going above and beyond when it comes to security.