How do I avoid being locked into one developer or vendor?

Keep code, documentation, domains, hosting, data, and key third-party accounts in business-controlled ownership. Use standard technologies where practical and require clear handoff documentation so another qualified team can take over.