Getting an app up for use only within a company can be a tedious thing. Luckily, now developers can upload apps directly to enterprise-locked version of Google Play Store,  with or without being a part of the organization.

Developers still need credentials and approval in order to upload their apps, thus preventing managed Play Stores from becoming cluttered with apps that don’t belong there. Naturally, companies can simply hand over the necessary credentials when negotiating for a third party developer to create a private app for their business.

So long as the contractor does not leak the app themselves, it will stay just as private as it would if it had been created and uploaded internally.