Android & iOS Development for Social Networking App
- Mobile App Development
- $10,000 to $49,999
- Dec. 2017 - Dec. 2018
- Quality
- 3.0
- Schedule
- 2.0
- Cost
- 3.0
- Willing to Refer
- 1.0
"I’m very frustrated. I’ve lost my business."
- Other industries
- United Kingdom
- 1-10 Employees
- Phone Interview
- Verified
Yudiz Solutions designed and developed native Android and iOS apps and deployed them to their respective stores and to AWS for hosting. This review includes the vendor’s response.
The application quickly attracted users following launch. However, it was breached because the database had not been correctly deployed and secured, resulting in the loss of the user base and the failure of the business. In addition, an external review of the code quality found significant bugs.
A Clutch analyst personally interviewed this client over the phone. Below is an edited transcript.
BACKGROUND
Introduce your business and what you do there.
I’m the founder of a mobile application that provides social networking for professionals on LinkedIn.
OPPORTUNITY / CHALLENGE
What challenge were you trying to address with Yudiz Solutions?
I started a fixed-price contract with them to deliver my Android and iOS native app.
SOLUTION
What was the scope of their involvement?
I contracted their development team in India to design, build, and deploy my mobile application. They deployed the mobile app to stores and to the AWS platform, where my website was already hosted.
What was the team dynamic?
We worked with a developer.
How did you come to work with Yudiz Solutions?
I approached them based on their ratings on Clutch.
How much have you invested with them?
$10,000–$25,000.
What is the status of this engagement?
We worked with them from Dec. 2017 – Dec. 2018.
RESULTS & FEEDBACK
Describe the impact this engagement has had on your business.
I went through social media marketing, network marketing, and seminars, and I acquired a lot of users within three months of going live. However, my application was later completely hacked. There was an intrusion in the database, and I immediately got in touch with AWS to understand what had happened.
After the audit done by a couple of consultants I contracted—along with the AWS consultants—it appeared that the application hadn’t been properly deployed to the servers. Their report noted that there’s an instance in AWS that should’ve been used to protect and back up the database. The Yudiz engineer who deployed the application didn’t deploy the database, so it wasn’t sitting in the instance of AWS. For this reason, I lost all my users and my application.
It had a huge impact on my business. I lost all the users I’d acquired over time. Yudiz deployed the application, but they didn’t close the port, so everyone could access the database through FTP. That was indicated by AWS, which sent me a couple of emails. Yudiz didn’t deploy the database into the Relational Database Service (RDS) instance of AWS. They kept the database on their servers, but without backup.
The application is completely buggy, and I’ve closed it on the app stores. All the effort I spent over 18 months in order to get this business started is gone. This was because of a simple mistake that could’ve been prevented if Yudiz had deployed the application jointly, in a secure RDS instance, and had closed the port. I’m very frustrated. I’ve lost my business.
I spoke to an agent of a privacy office, and I got in touch with all the users I could, which has been time-consuming for me. I shared the code with two auditors, and they told me it was buggy. It’s difficult to ask a company to jump in and work on the code from another developer. Every company I approached proposed starting from scratch, which may also be because they wanted a larger contract. I’ve already spent around £35,000 on this project, not only for Yudiz’s work, but for everything around it, from the website to marketing, the AWS infrastructure, and all the privacy office fees I had to pay.
How did Yudiz respond to any issues that arose?
I forwarded the emails I received from AWS to the CEO of Yudiz, and he told me it wasn’t their responsibility. I tried to communicate with them so they could repair my issue. It was difficult to make Yudiz understand what was happening, so they just pushed back, saying they weren’t responsible for third-party components.
I wasn’t asking them to take responsibility on that, but they made a mistake deploying the mobile app securely to AWS without considering the guidance and instructions given by AWS for deploying the app, specifically on making sure it isn’t made open to the public.
How was project management handled?
The fixed-price contract they signed with me included a project manager, but there wasn’t one assigned. There were only a couple of developers working offshore, and I wasn’t talking to them. The communication was very difficult, as everyone was working over Skype and the connectivity was quite poor. Because there was no project manager assigned, I had to manage the developers. I didn’t even see a project management plan.
We had a very difficult relationship, they didn’t deliver up to standards, and I was coming across multiple instances of requirements taking multiple iterations to complete. It took about a year to complete a mobile app that should’ve been done in six months.
I had communication issues with their team, and the developer wasn’t very competent. My database was hacked, and I didn’t even have access to the database, which was on their servers.
Is there anything that the vendor did well or that you would consider a strength?
No, I can’t think of anything.
Have they taken any steps to resolve the situation?
They told me I needed to pay them more money for them to resolve the situation. I wasn’t asking them to take on the responsibilities of AWS, but AWS isn’t responsible for databases that aren’t stored in an RDS instance.
When I approached them and asked whether they had any backups, they told me they didn’t, but that they could deploy the release they’d deployed one year ago. I told them to go ahead and do it but, when they did, there were no users anymore. It didn’t make sense to have a mobile application with zero users after 18 months, where I’d had 10,000 users before.
This company is based in India and I’m based in London, so it’s very difficult to start a legal process. I don’t want this to be repeated with other customers. It may not be a problem with Yudiz as a whole, but with one of their employees who did this incorrectly. I’m completely dissatisfied, and I don’t understand how their founder isn’t willing to come to a compromise. I’ve been completely penalized. I paid Yudiz for nothing.
What advice do you have for clients with similar needs to yours?
I wanted to share this information because it’s important for future clients to know that they should look at the deployment package before sending it to their hosting service. The solution went live, and we encountered several issues after that, which they tried to remediate. That was going on live, while I was acquiring users through marketing. The success of a mobile app is based on the volume of people we’re attracting.
If the client is looking to work in a fixed-price manner with an offshore team, they have to make sure there’s a collaboration platform available to exchange documents. Secondly, they should be aware of the fact that there’s a lot of handholding involved. When we’re not in direct touch with people, the communication has to be very clear, and there needs to be a real project manager involved, who’s able to monitor the activity and serve as the single point of contact for the client.
Another important aspect is to have an AWS consultant involved from day one, who can monitor what’s being done on the servers and ensure that the guidance given by AWS is respected when touching servers or changing instances.
Lastly, it’s important for clients to perform a quality check of the work before paying.
Company Responses
The vendor responded on May 31, 2019.
The first line of the review states: "The application quickly attracted users following the launch.” This clearly speaks that we did our job well. The application worked very well after the launch. And it needs to be noted that the problem came up in April 2019, which is nine months after the launch. As per the agreement, we have agreed to support the solution until November 2018, after which the contract ended. Thereafter, the client had to go for an annual maintenance contract, which was not taken.
It also needs to be noted that the AWS credentials have been shared with other third parties. Hence, holding us responsible for the issue is not justified as a complete handover was done smoothly during sign off, after which the client made the final payment.
The issues happened because someone hacked client's computer, as a result of which the hacker got full access to everything. All other allegations like no project manager or no project management are false as we have proof of using Basecamp and a dedicated project manager assigned. The iOS and Android app was launched within six months of time as promised, and we have proof of all such false allegations.
The fact is that the client was cutting costs at every corner and also compromised security by saving a few dollars. We recommended to include the required security in AWS. We have a very well-defined process of project execution and have deployed several other projects on AWS.
RATINGS
-
Quality
3.0Service & Deliverables
"We had a lot of bugs, and we spent a lot of time fixing them."
-
Schedule
2.0On time / deadlines
"We had a six-month deviation for the launch."
-
Cost
3.0Value / within estimates
"The auditors who reviewed my project said it should’ve cost 15% less."
-
Willing to Refer
1.0NPS
"I wouldn’t do this to my friends.