SECURITY ISSUE: I recently received an email from Mint.com at my personal email address with a weird transaction from Bank of America. Out of curiosity, I logged into Mint with my personal email address and realized with shock that I was looking at someone else's account with their cash balance, bank information and credit information. I contacted Mint immediately and expressed concern about their security. My email wasn't returned until the next day where they asked me for a ton of information (screen shots, list of bank accounts, etc.). I was like - "hey, I contacted you out of mere courtesy. It's your job to fix the problem and I'm not spending more of my time helping you fix your security issues."
The major flaw in Mint is when users sign up and set their email address as the log-in, Mint does not verify the email address is actually their email address. So I'm getting emails from Mint for some poor woman from Fort Worth, TX. Wherever you are Fort Worth, TX woman, no one stole your account - you just typed in the wrong email address. Most internet product companies have email verification. Why not Mint?