Setting the next column
CCReview / Moderate
A tracker is a lens on charges you already paid. It cannot cancel every merchant, and it often wants your bank connection or your inbox to do the finding. FTC guidance still starts with the company's cancel path and a saved confirmation. CFPB's 2024 open-banking rule is not a settled, enforceable floor in 2026. If three months of statements already fit in a spreadsheet, you may not need a third party inside the account.
The argumentA subscription tracker is useful when you have several cards, several app stores, and a memory that will not hold renewal dates. It is a detector, not a cancel button. The FTC's consumer advice is still: follow the company's cancel instructions, watch the next statements, dispute unauthorized charges with the card issuer, and keep records. ROSCA still requires a simple way to stop an online recurring charge you agreed to. The app cannot promise that every merchant complies. Bank-connect products typically use a data aggregator. That is a real privacy trade: a third party sees transactions. Email scanners see receipts and miss silent charges. Manual entry is the audit you can already do. CFPB's Personal Financial Data Rights rule (section 1033) had its compliance dates stayed in court in October 2025, and the Bureau is reconsidering the rule. Do not buy a tracker because you think federal open banking currently guarantees free, regulated API access. How to audit digital subscriptions is the statement-first method. How to compare recurring subscriptions is the before-you-click checklist. This page is whether a standing app is worth the access it demands.
I keep finding $7.99 charges I forgot. Is the answer a tracking app that connects to my bank, or is that a new company I have to trust?
A tracker finds charges. Cancellation still happens at Apple, Google, the merchant, or the card issuer. Keep the confirmation. FTC says so.
Bank-connect is the most complete and the most intimate. Read who the aggregator is, what they store, and how to revoke access.
Email-only apps miss charges that never send a receipt you still get. Manual spreadsheets miss nothing you are willing to type from a PDF statement.
CFPB section 1033 is not a 2026 consumer superpower you can assume. The 2024 rule's compliance dates were stayed; the Bureau is reconsidering. Shop the app's current permissions, not a future API.
The pitch is a dashboard that loves you. Recurring charges, in a list, with a button that looks like goodbye. The legal system does not live in that button. The merchant does, or Apple does, or the card network does. A tracking app is a very motivated reader of your mail and your ledger. Sometimes that is worth a login. Sometimes it is a second subscription whose job is to scold you about the first twelve.
If you have two cards and a quiet month, three statements and a notes app will find the same $7.99. The app starts to earn its keep when the charges hide as 'Apple.com,' 'Google *,' a gym that changed its DBA, and a free trial that learned your ZIP code.
| Access model | What it can find | What you hand over | What it cannot promise |
|---|---|---|---|
| Bank or card connect (aggregator) | Recurring amounts across accounts the connection covers, including merchants with no app icon | Transaction history, and sometimes account and routing details, to a third party | Canceling every merchant. Seeing cash, a spouse's card, or a store card you did not link. |
| Email or receipt scan | Subscriptions that still email invoices to that inbox | The contents of that mailbox, or at least the commercial slice | Charges that never email, or that email an address you do not scan. |
| App Store lists only | Apple or Google billing, which statements often show as a generic line | Whatever those stores already know | The streaming site you paid on the web, the newspaper, the cloud backup on a Visa. |
| Manual (spreadsheet or notes) | Whatever you copy from PDFs | Nothing to a startup | Catching a new charge unless you look again. That is a calendar problem, not an API problem. |
How many places charge you, and how much access will you tolerate?
Do the audit article once: three months of statements, Apple and Google subscription screens, a list with renewal dates. Set a twice-a-year reminder.
A bank-connect tracker can cluster those lines. Read the aggregator's privacy policy as if it were a roommate.
Some will open a flow or a chat. Many will hand you a link. FTC: use the company's method and keep proof. If charges continue, dispute with the card issuer.
Open banking is the hope that your bank must hand a clean feed to an app you authorize, through an API, with rules. Section 1033 of Dodd-Frank is the statute. The CFPB's 2024 Personal Financial Data Rights rule tried to implement it. As of the Bureau's own compliance page, a federal court stayed that rule's compliance dates on 29 October 2025, and the CFPB has been reconsidering the rule since an August 2025 advance notice. In August 2026 the Bureau was still in a rewrite, not in a world where every tracker can assume a free, standardized bank pipe. Screen-scraping and commercial aggregator contracts are still how a lot of this works. That is a security and bargaining story, not a reason to panic, and not a reason to believe the App Store screenshot.
ROSCA still sits under online sign-up: disclose, consent, simple stop. The stricter Click-to-Cancel rule is not in force after the 2025 vacatur. State automatic-renewal laws may be tougher. None of that lets a tracker reach into a merchant that only takes a phone call during business hours.
How to audit digital subscriptions is the method if you want zero new vendors. How to compare recurring subscriptions is the contract you should have read before the trial. Why everything has a membership now is the culture. This page is only the standing app.
Old student checking, a store card, a partner's joint account. If you will not link it, the dashboard is fiction.
Plaid, MX, Finicity, or 'we collect it ourselves.' Revoke from the bank's connected-apps screen when you quit.
If they do not exist, that is an answer.
Screenshot, email, reference number, stored outside the app you might delete.
Statements remain the source of truth. The app is a highlighter.
Access is the price. Pay it only if the highlighter beats a PDF.
Cancel where you subscribed. Keep the receipt. Dispute with the card if they keep charging.
A full bank connection often sees deposits as well as charges. If that bothers you, do not link that account. Use a card you only use for software, or stay on statements.
Free means the product is you, or a trial, or a limited scan. Read permissions. Price is not a security rating.
Usually no. The FTC path is the merchant, then the card issuer. The app may remind you. It is not the network.
Sources and further reading
FTC consumer advice: cancel using the company's instructions; keep a copy of the request; watch statements; dispute unauthorized charges with the card issuer; report problems to ReportFraud.ftc.gov and the state attorney general. Negative-option billing must be explained; canceling should be simple.
ROSCA: for internet negative-option features, disclose material terms before taking billing information, obtain express informed consent, and provide simple mechanisms to stop recurring charges. The FTC's later Click-to-Cancel rule was vacated in 2025; ROSCA remains.
CFPB: on 29 October 2025, compliance dates of the Personal Financial Data Rights Rule were stayed by the court in Forcht Bank v. CFPB (E.D. Ky.). On 22 August 2025 the CFPB issued an ANPR on possible amendments and planned an NPRM to extend compliance dates. Do not treat the 2024 rule as currently driving bank-API access for consumer apps.
Continue reading
Annualize the price, read the renewal and price-change terms, and try the cancellation path on a throwaway trial if you can. A monthly number is a marketing unit. ROSCA still requires a simple way to stop an online recurring charge, even after the FTC's 2024 Click-to-Cancel rule was vacated. A free trial is a billing arrangement, not a gift.
Guides / How-To / 6 min
READ NEXTAbout the byline
Sources, review method, and commercial relationships appear with each story. Reach the desk at editorial@culturecolumn.com.
