https://www.mx.com/blog/screen-scraping-vs-bank-apis-whats-the-difference/ [www mx com]

Discusses bank APIs versus screen scraping, but leaves off a major issue, IMO. Under the Computer Fraud and Abuse Act, a person can be prosecuted for giving their login info to someone else when a site's ToS forbids it. (Hint: almost all sites forbid it.)

Typically, this is not prosecuted unless the account gets used for nefarious purposes, but the potential is there. Likewise for Facebook's "give us access to your e-mail account so we can find all your contacts' FB accounts".