App Development

How to hire an app development company in 2026: what to check before you sign

Updated 8 min readBy Sandeep Mahajan

A phone showing an orange card, with an orange pencil beside it, on a dark navy background

Hire an app development company on evidence you can check, and protect yourself in writing. Look at working apps and speak to past clients, not at claims; make sure the Apple and Google developer accounts, the source code and the designs are in your company's name; agree the scope, acceptance tests and support in the contract; ask how they secure the app and how they use AI coding tools; and plan for maintenance, because both stores raise their requirements every year. Where the team is based matters less than how it communicates and how much of the work you can see along the way.

Key takeaways

  • Apple requires an organization to be a legal entity with a D-U-N-S Number, a publicly available website whose domain is associated with the organization, and an Account Holder with legal authority to bind it. The Apple Developer Program costs 99 USD per membership year.
  • Google Play personal developer accounts created after 13 November 2023 must run a closed test with at least 12 testers opted in continuously for 14 days before applying for production access.
  • Apple does let an Account Holder transfer an app to another account, but the app must meet transfer criteria and some features (Sign in with Apple, shared iCloud containers, TestFlight) need extra steps, so it is better to create the accounts in your own name from the start.
  • OWASP's Mobile Application Security Verification Standard groups mobile security into eight areas: storage, cryptography, authentication, network, platform interaction, code quality, resilience and privacy.
  • Ask any agency how it uses AI coding tools and what code or data may go into them.

What should you decide before asking for quotes?

Write one page covering what the app must do on day one, who will use it, which platforms you need, how success will be measured and roughly what you can spend. With that, agencies can quote on the same basis and you can compare answers. If you have not chosen between one cross-platform app and two native apps, read Cross-platform or native in 2026 first.

Also decide how you want to work. We offer three ways: a fixed scope, where scope and cost are agreed up front; time and material, where you pay for the time and resources used; and dedicated hiring, where a team works on your project. Fixed scope suits a well-defined first release; time and material suits work that will change as you learn; dedicated hiring suits long-running products.

Who should own the developer accounts?

You should. The app lives in the Apple and Google developer accounts, so whoever holds them controls publishing, updates and the app's listing. Create them in your company's name and add the agency as a team member.

  • Apple. An organization must be a legal entity that can enter into contracts with Apple; DBAs, fictitious business names, trade names and branches are not accepted. It needs a D-U-N-S Number, a publicly available and functional website whose domain is associated with the organization, and an Account Holder with the legal authority to bind it. The program costs 99 USD per membership year. An individual enrolls with a personal legal name.
  • Google Play. For personal accounts created after 13 November 2023, Google requires a closed test with at least 12 testers opted in continuously for at least 14 days before you can apply for production access. Plan that time into your launch.

If an app is already in someone else's account, Apple supports transfers: the Account Holder initiates the transfer, the app keeps its Bundle ID, and reviews and ratings are retained. But the app must meet the transfer criteria, TestFlight beta testing must be turned off beforehand, apps that use Sign in with Apple need a transfer identifier for each user, and apps that share a CloudKit container with other apps will cause those apps to lose access to it. Avoiding the need for a transfer is far easier.

How do you compare agencies?

Check What good looks like
Working apps Apps you can install and use, with a named contact who can confirm the agency's role
References A past client you can speak to, ideally with a similar scope
The team You meet the people who will do the work, not only a salesperson
Process Discovery, design, build, testing and release are described, with demos along the way
Communication Named contact, regular meetings and a shared place to see progress
Security A stated approach, for example against the OWASP MASVS areas
Accessibility They can describe how they test for it
AI tools A written policy on what is allowed and what is not
After launch A support and maintenance plan, with a price

Be wary of quotes that are far below the others without a clear reason, and of any agency that will not show working software before you pay for the next stage.

What should the contract say?

This is general information, not legal advice; have a lawyer review your contract.

  1. Ownership. You own the source code, designs and assets once paid, and any third-party licences are listed.
  2. Accounts. Developer accounts, app listings, analytics and cloud services are in your name.
  3. Scope and acceptance. What is delivered at each stage, and the tests that decide it is accepted.
  4. Payments. Tied to accepted milestones for a fixed scope; to approved time reports for time and material.
  5. Confidentiality. Who may see your data and code.
  6. Support. What happens after launch, for how long, and at what rate.
  7. Handover and exit. Documentation, repository access and a clear way to move to another team.

Is outsourcing, including offshore, a good idea?

It can be, if you manage the risks. A team in another time zone may be less convenient for calls but can be easier to staff and fund. What makes either work is the same: clear scope, regular demos you can try yourself, a single point of contact and ownership of the accounts and code from day one. We have offices in Canada and India and work with clients worldwide; see our app development page.

What skills should the developers have?

For the platform: Swift for iOS or Kotlin for Android, or the cross-platform framework you chose. Beyond that, ask for experience with working with APIs, automated testing, secure data handling, accessibility and releasing to both stores. On the people side, look for clear written communication, honesty about trade-offs and the habit of asking about the business goal before building.

How does AI change the brief?

AI coding assistants are now common, so ask about them directly: which tools are used, what code and data may be pasted into them, who reviews the output and how it is tested. A good answer is a written policy, not a promise. Ours is described in How we use AI coding assistants, and the limits we recommend. Also ask whether the app itself will use AI features, since those need their own privacy and testing plan; see How to choose a tech stack for a web or mobile app in 2026.

A checklist before you sign

  1. One-page brief written and shared.
  2. Apple and Google accounts created in your name.
  3. Working apps seen, and one reference called.
  4. Team introduced, with a named contact.
  5. Security and accessibility approach explained.
  6. AI tool policy received in writing.
  7. Scope, acceptance tests and milestones in the contract.
  8. Source code, designs and accounts owned by you.
  9. Support and maintenance priced.
  10. Handover plan agreed.

For help with design and build, see our app design and hybrid app development pages.

FAQ

Should we own the Apple and Google developer accounts ourselves?

Yes. Create them in your company's name and add the agency as a team member. Apple allows transfers, but they come with conditions, so it is simpler never to need one.

What do we need to enrol as an organization on Apple's program?

Apple requires a legal entity that can enter into contracts (not a DBA or trade name), a D-U-N-S Number, a public website whose domain is associated with the organization, and an Account Holder with authority to bind it. The fee is 99 USD per membership year.

How long does a first Google Play release take after the app is built?

For a new personal account, Google requires a closed test with at least 12 testers opted in for at least 14 days before you can apply for production access, so plan at least that long.

Is a fixed price or time and material better?

Fixed scope suits a clear first release. Time and material suits work that will change. Choose by how well defined the work is.

Is it safe to let a developer use AI tools on our code?

It can be, with a written policy covering which tools are approved, what code or data may be pasted in, and how output is reviewed and tested. Ask for the policy before you sign.

Sources

Share this article