This is already happening in banking (Europe): Google for PSD2 and Open Banking. Financial institutions are required to provide Third Party Providers API-acccess to customer data (if the customer has provided his/her consent to do so)