She was good. That's the part that makes this hard to talk about. The contractor who built your site, set up your email list and connected your payment processor did all of it well, and she did it quickly, and when she asked whether she should just create the accounts herself so you didn't have to stop what you were doing, you said yes, because of course you did. You had a business to run.
Then the contract ended, on perfectly good terms, and three months later you needed to change one line on your own homepage and realized you didn't know where the site actually lived, whose email address the account was registered under, or what the password was. You had a business. What you didn't have was the keys to it.
I want to be careful here, because the easy version of this story has a villain in it and most of the time there isn't one. Nobody took anything from you. Access just settled, the way water does, in the lowest and most convenient place, which was the inbox of the person doing the work at the moment the work got done.
How founders end up locked out of their own tools
Every tool your business runs on has an owner, and the owner is whoever's email address was typed into the signup form. Not whoever paid. Not whoever the tool is for. The email address. So when a contractor sets up your scheduling tool from her own account and adds you as a user, the tool's understanding of the situation is that it belongs to her and you are a guest in it.
That distinction costs nothing for months, sometimes years, because guests can do almost everything owners can. You can log in, send the emails, see the bookings, move the money. The difference only shows up in the handful of moments that actually matter: changing the billing card, exporting your full client list, recovering the account after a lockout, or shutting it down. Those belong to the owner, and the owner has moved on to other clients.
There's a quieter version too, where the account is technically yours but the recovery phone number is hers, or the two-step code goes to a device you've never seen. You own it on paper. In practice you're one forgotten password away from needing a favor from somebody who no longer works with you.
And it compounds, because each tool is usually connected to three others. The domain points at the site, the site talks to the email list, the email list talks to the payment processor. Lose your footing in one and you find out, in the worst possible week, how many of the others were standing on it.
If the recovery email isn't yours, the account isn't either. You're just the person who uses it most.
Why this happens to capable people
I see this constantly with founders who are, by any fair measure, very good at running their businesses, and it's worth saying plainly that being good at the business is exactly how it happens. When you're the one closing the sale, delivering the work and answering the client, setup is the thing you hand off first, and you hand it off completely, because holding on to the details of it defeats the purpose of getting help.
There's a deeper pattern underneath that, and it's one a lot of us were raised into. We are taught to be gracious with people who help us, to not hover, to not ask a question that sounds like we don't trust somebody. So asking a contractor to set everything up under your name instead of hers can feel, in the moment, like an accusation. It isn't. It's the same as asking a builder to put the deed in your name.
It also happens with the best employees, not the worst ones. The operations manager who made everything run for four years is very often the only person who knows where anything lives, and when she takes a better job, which she should, she walks out carrying a map nobody else was ever shown. That's not disloyalty. That's a business that kept its memory in one person.
So here's the question I'd ask you to actually sit with: if every person who has ever set something up for you became unreachable tonight, which parts of your business could you still open tomorrow morning?
The access setup that keeps your business yours
The fix is plain, and it's a structure rather than a personality change. One email address that belongs to the business and to nobody's first name, something like an admin or accounts address on your own domain, becomes the owner of every single tool. Not your personal email, and never a contractor's. That one decision means ownership stays put no matter who comes and goes.
Then people get invited in as people. A contractor gets her own login with the level of access the job needs, and when the job ends, you remove one user and the tool carries on without noticing. Nothing has to be handed over, because nothing was ever handed away.
Passwords for that owner address live in a password manager the business controls, with you and one trusted backup person able to open it. That backup matters more than founders like to think about, because the other way a business loses its keys is that the only person holding them is you, and you're allowed to get sick.
Do the same for anything that sends on your behalf — the address your invoices come from, the number your appointment reminders text from, the profile your business page is managed through. Those feel like details right up until a client tells you a reminder came from a name they didn't recognize, and you realize you didn't recognize it either.
And write the list down. Every tool, what it does, which address owns it, where it bills, and when it renews. One page. It takes an afternoon, it's unglamorous work, and it's the single document I'd want in my hands first if I were walking into your business cold.
If you already have tools sitting under somebody else's login, start with the ones attached to money and to your domain, because those are the hardest to recover and the most expensive to lose. Most platforms have a real ownership-transfer process. It's far easier to run while everyone is still on good terms and answering messages than after a year of silence.
The takeaway
Open one tool your business depends on today and look for a single piece of information: the email address listed as the account owner. If it's yours, good. If it's somebody else's, you've just found the most useful thing you'll learn about your business this month.
None of this is about distrusting the people who help you build. It's about the difference between somebody having a key and somebody holding the deed. You can hand out as many keys as the work calls for, generously, to people you're glad to have. The deed stays in your name.
Your business deserves to be something you can open with your own hands. 🔑
Want a clear map of who actually holds the keys across your whole setup? Start here: Discover