How your bank spies on your exact monthly income - and shares it with other firms