Following the blog post about the new app types: https://www.shopify.com/partners/blog/shopify-public-apps
The recommended approach is to now create Custom Apps in the Partner Dashboard and then associate it with a single store. Most likely it would be in the developer's Partner account.
However, as a merchant, is that in my best interest if in the future the relationship with the developer ends? What is the recommended course of action when that happens? Does the merchant retain control somehow and can rotate the keys?
This is assuming the merchant already has control of the source code in their own hosting environment.
@magecomp Thanks for your reply.
What about in the case that I need integrations that aren't allowed with Private Apps and instead need a Custom App?
Would the solution that for that be: the merchant creates their own Partner account and invite the developer?
I could see this being somewhat of a pain if a dev agency already has a Partner account with their team/staff configured.