In September 2024, hundreds of thousands of homeowners opened an app to check their solar panels and got nothing. No data. No support line. No way in.
The app was mySunPower, and it had just gone dark. SunPower, one of the biggest names in American solar, had filed for bankruptcy the month before, and the monitoring system it built was proprietary. When the company went, the app went. The panels were still on the roof, still working. The window into them was simply gone, and it belonged to a company that no longer existed.
Nearly 586,000 households learned the same lesson at the same moment. The thing that ran their system was never theirs. They'd been renting the keys.
Your business has this exact risk, and it's probably hiding in your marketing right now.
What vendor lock-in actually is
Vendor lock-in is when the tools your business runs on live inside a company you don't control, so leaving or losing that company costs you the business itself.
It doesn't feel like a risk day to day. Everything works. The website loads, the ads run, the reviews come in. The lock-in is invisible right up until one of three things happens: the vendor raises the price and you can't say no, the vendor changes the terms and you have to eat it, or the vendor disappears and takes your stuff with it. SunPower was the third kind, in public, at scale. Most business owners only ever meet the first two, and they're bad enough.
The tell is always the same. You can use the tool, but you can't take it with you. That's not ownership. That's a subscription to your own assets.
Where it hides in a local business
Not in the obvious places. In the marketing stack, where you assumed it was handled.
Here's the uncomfortable version. A lot of local businesses don't hold the things their entire customer flow depends on. Somebody set them up years ago, it all worked, and nobody checked whose name was on the account. We wrote the full walk-through of this in the six marketing logins every business should hold in its own name, and the pattern repeats everywhere: the assets that hold your customers are sitting in someone else's account.
| What a vendor can hold hostage | What owning it actually looks like | | --- | --- | | A website you can't export or edit | The domain and the site files, in your name, movable | | Your Google Business Profile, set up by an agency | You as Primary Owner, able to read every field | | Ads inside the agency's ad account | A business account you own, agency added as partner | | A customer list on a platform's servers | An exportable file of names, emails, and phones | | Reviews and chats inside a comms platform | The ability to leave and keep your history | | Bookings in a tool billed to someone else | A calendar and appointment history that's yours |
Read the left column again. Every row is fine until the day you want to leave, and then every row is a reason you can't. That's lock-in doing its job.
The website is the SunPower of small business
The closest match to the mySunPower story is the proprietary website.
Plenty of marketing companies build your site on a closed platform you can never export from. It looks like a normal website. It is not a normal website, because the day you stop paying, it doesn't move, it vanishes, and you start again from zero somewhere else. That's the same shape as a solar system whose only monitor was an app the vendor owned. The asset is real. The access is rented. We took apart one well-known version of this in the hidden cost of a proprietary CMS like Scorpion, and the mechanism is exactly the lock-in above: leave, and you lose the site, the rankings, and the years of work baked into it.
A website you can't take with you isn't cheaper. It's a hostage you pay rent on.
Why smart owners end up locked in anyway
It's rarely a scam. It's usually just speed, and it's why this catches careful people.
When you started, you needed a website, ads, and a booking tool fast, so a vendor spun them all up under their own accounts because that was the quickest way to get you live. Nobody moved them afterward. Years pass. The setup works. You never think about custody until the relationship sours or the price jumps, and by then untangling it means unplugging your whole business at once.
Some of it is deliberate, though, and you should know the difference. Lock-in is a business model. If leaving means losing your site, your rankings, your ad history, your reviews, and your customer list all together, you won't leave, even when the work is mediocre. The vendor stops having to earn the retainer, because the exit is more painful than the disappointment. That's not a partnership. It's leverage, billed monthly.
We're not above this either. We once ran our own operation on a platform someone else had given us access to, and one ordinary afternoon the access simply stopped working. There was no one to call. We rebuilt the whole thing on tools we own, which was miserable work nobody wants to do twice. Now nothing switches off unless we switch it off. That's the entire point of ownership: not distrust, just control of your own off switch.
Using vendors is fine. Handing them custody isn't.
Let's be clear, because this isn't an argument for doing everything yourself.
Hiring specialists is smart. A good agency, a good platform, a good freelancer will run circles around a busy owner doing it alone at midnight. The danger was never the help. It's letting the help hold the assets in its name instead of yours. Those are two completely different things, and the difference is your entire leverage.
A healthy setup looks like this: vendors do the work, inside accounts you own. Your agency runs your ads brilliantly, in your ad account. Your web team builds a great site, on your domain, exportable. Your reviews platform collects reviews, and you can leave with your history. You get every bit of the expertise, and you keep the keys. You can fire any of them on a Tuesday and keep everything they built, which, not by accident, also makes them work harder to keep you.
The only version to avoid is the one where leaving means starting from zero. That's the SunPower version. It's fine until it isn't, and when it isn't, it's the whole business.
What this looks like when you own it
The upside isn't just safety. Owned setups quietly perform better, because the pieces finally point at the same business.
When your domain, your Google profile, your ads, and your customer list are all yours, they compound. Your ad account keeps years of learning that drives your cost per customer down over time. Your customer list gets more valuable every year instead of evaporating when a contract ends. Your reviews build on a profile you control. Rented pieces reset to zero the day the relationship ends. Owned pieces stack.
Here's a cross-industry order of magnitude, not a number for your trade. For a med spa we work with in Nice, €620 of ad budget produced 193 leads at €3.21 each and 88 clients, with the first lead answered at 1h27, all inside accounts the clinic owns. The point isn't the med spa figure, which won't match your business. It's that the machine sits in the owner's name, so it keeps compounding for them and can't be switched off by anyone else.
[If you're not sure who actually holds your domain, your ad account, or your customer list, that's worth twenty minutes. Book a free audit and we'll map exactly what you own and what a vendor holds, whether or not you ever work with us.]
The one test that tells you everything
Forget the audit for a second. There's a faster version, and it takes one message.
Send this today, to whoever runs your marketing: "Can you add me as owner on the ad account and send me the domain login?"
Watch the reply. If the access shows up the next day, you're fine, keep them, they're a real partner. If it turns into questions about why you need it, an offer to "hop on a call and walk you through it," or a silence that drifts into next week, you already have your answer. The reaction tells you more than any contract clause. And the worst time to run this test is the day you're already trying to leave, because that's the day the other side holds all of it.
30-Second Audit
Three honest questions about the tools your business runs on. Answer yes or no.
- If you ended every vendor relationship tomorrow, would you keep your website, your ad history, your bookings, and your customer list?
- Is your domain registered in your name, with your email and your card on it, not a vendor's?
- Could you export your customer list to a file today, without asking anyone's permission?
If any answer was no, that's not paranoia, it's a gap, and it's far cheaper to close before you need to than after. Book a free audit and we'll show you exactly what you'd lose if a vendor vanished, even if you fix it yourself.
The panels stay on the roof. Make sure the keys stay in your pocket.