Claude Code User Details Production App Challenges: Security, Compliance, and Edge Cases

Production App Development with Claude Code: Beyond the Demo

A developer on r/ClaudeAI details their six-month experience building a 220,000-line personal finance app with Claude Code, contrasting it with common "built in 2 hours" demos. The app connects to real banks through Plaid, handles real money, has real users on TestFlight, and is shipping to the App Store.

Specific Production Challenges Encountered

The developer identifies concrete issues that emerged when moving from demo to production:

• Security Vulnerabilities: A month 5 audit revealed users could self-escalate to lifetime premium by writing to their own Firestore document. Raw bank data was being sent to the AI in three code paths. Five console.log statements were leaking user data in production.
• Plaid Integration Complexities: Getting production access required forming an LLC, obtaining an EIN, and passing a compliance review. Technical issues included a Firestore batch overflow at 502 operations (limit is 500), a pagination loop that broke on rate limits, and an OAuth redirect that 404'd due to missing website routes.
• App Store Submission Hurdles: Build 27 was rejected not for technical reasons, but for a missing Terms of Service link on one specific onboarding screen. Identifying the exact screen took longer than implementing the fix.
• Undocumented Edge Cases: A SecureStore key with colons silently fails on iOS—no error thrown, no warning, just quietly writes nothing. This undocumented behavior required three debugging sessions.

The Reality of AI-Assisted Development

The developer notes that while Claude Code "is incredible" and essential for their project, the narrative that AI makes software engineering easy is misleading. AI makes implementation easier, but the hard parts of production software remain: security, compliance, edge cases, platform quirks, and the decisions that determine whether an app works for real users or just looks good in a demo.

Their advice: "If you're building with Claude Code, build something real. Connect it to real data. Put it in front of real users. Let them break it. That's where the actual learning happens."