Help to check and develop a web app

We have built a small web app and we want an independent technology professional and app developer to check it over, fix what the check finds, and then look after it. We are not asking anyone to rebuild it.

We are seeking two things: your costs, and your approach. Tell us what you would do, in what order and why, as well as what it would cost. We have not set a budget and we are not looking for the cheapest quote. We are looking for the supplier who understands the job.

What we want you to quote for
Please price each of these separately so we can compare quotes, and say clearly what is included and what is not. With each one, tell us briefly how you would go about it.

A. Code and security review (fixed price)
• Read the source code and tell us what is wrong, badly built, or risky.
• Look at the access code. We know it is a turnstile rather than a lock. Tell us whether that is reasonable for a free tool, and what a better option would cost.

B. Testing on real devices (fixed price)
• Test on current and older iPhones and Android phones.
• One behaviour matters more than any other: when a builder taps the report link in an email, does it open the app they installed on their home screen, or a separate browser window that cannot see their records? Tell us what actually happens on each platform and what we should do about it.
• Also check adding to the home screen, working with no signal, and the camera and voice dictation.

C. Fixing what A and B find (price or day rate)
• We expect to agree the list of fixes with you before you start.
• Quote a fixed price if you can, or a day rate with an estimate.

D. Keeping it going (annual price)
• A few days a year: small fixes, the yearly access code change, and updates when the Code changes.
• Tell us your response time for something broken, and how we reach you.

E. Optional, priced separately — tell us if you would recommend it
• Putting the app in the Apple App Store and Google Play. Note that it already installs from the browser without this.
• A small server so customer reports arrive automatically instead of by email, and records are backed up off the device. This would mean we hold customer data, which is a decision we have not taken. Price it, but do not assume it.