He didn't say that they might shut down AppEngine. He said they might decide to close down your site. No library stops working from one day to the next.
I wonder what the appeals process is in case of a dispute. Considering some people's experiences with Google Checkout I would at least read the terms of service very carefully.
This is not just an issue with Google. It's a general issue with that kind of all in one cloud service.
[edit] If you use google accounts for authentication the risk is even greater.
The risk you are describing is that Google decides to shut down YOUR site only?
Where does that rank among:
- Your chief developer gets seriously injured or quits
- Your funding dries up
- You run into unexpected scaling problems when rolling your own data center.
- You miss out on some other opportunity because you have allocated lots of your finite resources to scaling.
I think we can look to Amazon AWS to see a more likely outcome of the sort of concern you are getting at: After a while Amazon did adjust the pricing of some of its services to better mirror its own costs. This was not to be punitive toward its customers, but simply to allow it to better pass along costs (most customers saw their bill decrease).
So I'd say the real risk is that if you use a beta cloud service and your business model is based on some sort of loophole in the pricing, you run the risk of that loophole being closed and your costs increasing.
The risk that my site could be shut down without notice ranks pretty high. Just think of copyright issues of the sort that Google itself has all the time. What would be Google's reaction to a cease and desist letter be?
This risk ranks much higher than my fear of scaling problems as that is something I am at least competent at solving. My funding doesn't dry up over night. If my chief developer quits, development will slow down for a while but the service won't stop working tomorrow. Some risks just cannot be avoided anyway.
And I'm not saying I want to run my own data center. What I'm saying is that I want reasonable terms of service and a realistic transition path to a different provider.
In case of a conflict I want someone to talk to me _before_ my site is shut down, and if the issues cannot be resolved I want a reasonable period of time to move elsewhere.
[edit] If the technical specificities of a platform prevent me from moving my site within that grace period, I'm not going to use the platform for any serious business.
Good point about a cease and desist letter, but I do think you'd run that risks with a lot of hosting companies and even bandwidth providers.
If your business/project is on shaky enough legal ground that you really have to worry about cease and desist letters, then I'd say you would need to look into some sort of offshore hosting. If so then your argument is against most normal hosting not just google app engine.
As for the transition path, that is a good point. Google has open sourced the spec and sdk, so someone could feasibly reverse engineer something that behaved just like app engine -- in fact I wouldn't be surprised if a serious attempt at this happens fairly soon.
Yes you're completely right that I may have that problem with other hosting companies as well. And that's why it's so important to be able to move if need be.
My project is not any more on shaky ground than Google's own business. Search engines or any service that lets users upload or link content is prone to cease and desist letters. Only very recently there was a post here on HN where someone complained that 6 tweets were uploaded to a competitor's site by a user.
And then there's Google's user authentication service, which is very convenient. I can't think of a way to migrate that one without asking all my users to create new accounts and provide their google login password so I can check whether they are the legitimate owner of that account.
True. There isn't currently a great path away from app engine, but there is nothing about app engine that prevents someone from building one.
As for user auth, I'd suggest setting up a table that stores the user's email address and a random hash, so if google auth stops working they can just "reset their password" and you can use your own auth system w/ the same email address as the google account.
I wonder what the appeals process is in case of a dispute. Considering some people's experiences with Google Checkout I would at least read the terms of service very carefully.
This is not just an issue with Google. It's a general issue with that kind of all in one cloud service.
[edit] If you use google accounts for authentication the risk is even greater.