Exactly, I never gave them my bank account info. Even if cdft had no intention of misusing it. What are there security protocols? Where and how do the store the info?