The questions that reveal whether a developer or agency will actually protect your product long-term.