Skip to content

Case study

One shared API and two rebuilt transit apps

A regional transit agency had iOS and Android apps built by different vendors two years apart, and they had drifted. We put one API in front of scheduling, fares and alerts, then rebuilt both clients against it.

Named only with client approval Figures marked are illustrative Reply within one business day

9:41●●●

Good morning

Your account at a glance

Balance

12,480

+240
−36
+1,200
Continue

The engagement, in short

OlDevs rebuilt the iOS and Android apps for a regional transit agency serving a metropolitan area of about one million residents in western Canada, and put a single TypeScript API on Node in front of the scheduling, fare and service alert systems.Both clients were written from one shared specification, iOS in Swift and SwiftUI and Android in Kotlin and Jetpack Compose, each meeting WCAG 2.2 AA for text scaling and screen reader use. A feature now ships to both platforms in the same release instead of arriving late on one of them, and the agency's own developers own and maintain the whole stack. The seven month engagement consolidated 3 to 1 Back-end APIs, and the agency reported 99.5% Crash-free sessions and a 47% reduction in App support tickets.

Key facts

01Client
A regional transit agency serving a metropolitan area of about one million residents in western Canada
02Industry
Public transit
03Services
iOS App Development, Android App Development, Full-Stack Development
04Duration
7 months
05Platforms
Native iOS and Android clients over one TypeScript API on Node
06Outcome
3 to 1 Back-end APIs consolidated, 99.5% Crash-free sessions, 47% cut in App support tickets

The challenge

Two apps, two vendors, two different systems

The iOS and Android apps had been built by different vendors two years apart and had drifted badly: trip planning behaved one way on one platform and another way on the other, and fare purchases differed again. Each app talked directly to its own mix of back-end services, so a schedule or fare change meant several separate updates and one of them was always late. Riders reviewed the apps accordingly, and agency staff fielded the complaints.

01

Trip planning gave different answers

The same journey, entered the same way, produced different results depending on which phone a rider was holding. Staff could not reproduce a complaint without first asking which app it came from, and riders had no reason to trust either answer.

Platform drift · Trip planning

02

Fares worked differently again

Fare purchase had been implemented separately on each platform, so the steps, the wording and the edge cases did not match. A rider who switched phones had to relearn the part of the app where getting it wrong costs money.

Fare purchase · Inconsistent flows

03

Every change had to be made several times

Each app spoke directly to its own mix of back-end services, so a schedule or fare change meant several separate updates coordinated across systems and release cycles. One of them was always late, and the late one was what riders noticed.

Duplicated back ends · Release lag

04

The complaints landed on staff

App store reviews reflected the inconsistency, and the questions that followed came to agency staff who had no way to fix the underlying difference. Support time went into explaining behaviour rather than into service.

Support load · App store reviews

What we built

One contract, two clients built against it

We put a single API in front of the scheduling, fare and service alert systems, written in TypeScript on Node with a published contract that both clients build against. iOS was rebuilt in Swift and SwiftUI and Android in Kotlin and Jetpack Compose from one shared specification, both meeting WCAG 2.2 AA for text scaling and screen reader use. A feature now ships to both platforms in the same release, and the agency's own developers own and maintain the whole stack rather than depending on whichever vendor built that half.

01

One API over three systems

A TypeScript service on Node sits in front of scheduling, fares and service alerts and presents them as one interface. Back-end APIs went from 3 to 1 as far as the apps are concerned, so a change is made once and both clients see it.

TypeScript · Node.js · API consolidation

02

A published contract both clients build to

The API contract is documented, versioned and testable, so neither app is guessing at behaviour. Trip planning and fare purchase are specified once and implemented against the same definition rather than interpreted twice.

Published contract · Shared specification

03

iOS and Android rebuilt from one spec

Swift and SwiftUI on iOS, Kotlin and Jetpack Compose on Android, both written from the same functional specification so a rider gets the same trip and the same fare regardless of which phone they carry.

SwiftUI · Jetpack Compose · Feature parity

04

Accessibility built to WCAG 2.2 AA

Both apps support large text sizes without breaking layout and are navigable with VoiceOver and TalkBack, with service alerts and fare state conveyed in text rather than by colour alone. Accessibility was part of the weekly demo, not an audit at the end.

WCAG 2.2 AA · VoiceOver · TalkBack

Process

How the engagement ran.

  1. Audit of both apps and every back end

    We documented what each app actually did, where the two disagreed and which back-end service each screen was calling, so the differences were a written list rather than an argument.

  2. One specification for both platforms

    Trip planning, fares and alerts were specified once, with the agency choosing the correct behaviour wherever the old apps disagreed. That specification became the shared source for both client teams.

  3. API first, with the contract published

    The TypeScript API went in front of scheduling, fares and alerts before client work started, so both apps were built against a stable, documented and versioned contract instead of a moving target.

  4. Parallel client builds with weekly demos

    iOS and Android were built alongside each other with a working demo every week, shown on both platforms in the same session so any drift was visible immediately and fixed while it was small.

  5. Paired release and handover

    Both clients shipped in the same release, then the API, both apps, the pipelines and the documentation went to the agency's own developers, who own and maintain the stack.

Stack

What it was built with.

API and services

TypeScriptNode.jsPublished API contractScheduling system integrationFare system integrationService alert integration

iOS client

SwiftSwiftUIAutomated testsAccessibility testing

Android client

KotlinJetpack ComposeAutomated testsAccessibility testing

Delivery

Continuous integration pipelineContract tests in CIPaired releases on both platformsClient-owned repositories and accounts

Accessibility and quality

WCAG 2.2 AAVoiceOverTalkBackText scalingCrash reporting

3→1

Back-end APIs consolidated

99.5%

Crash-free sessions

−47%

App support tickets

Outcomes

What changed for the client.

01

The same trip on either phone

Trip planning and fare purchase now come from one specification over one API, so a rider gets the same answer and the same steps whether they are on iOS or Android, and staff can reproduce a complaint without asking which app it came from.

02

Change made once, not several times

Back-end APIs went from 3 to 1 behind the apps, so a schedule or fare change is made in one place and ships to both platforms in the same release rather than arriving late on one of them.

03

Fewer questions reaching staff

With behaviour consistent and alerts reliable, the agency reported a 47% reduction in App support tickets, and 99.5% Crash-free sessions on the rebuilt clients.

04

The agency owns and runs the stack

The API, both apps, the pipelines and the documentation sit with the agency's own developers, who now ship changes themselves instead of coordinating two vendors on two schedules.

In their words

The client on the result.

Riders get the same trip and the same fare on either phone now, and we make a change once instead of three times.
AR

Digital services manager, regional transit agency

Public transit

FAQ

Questions about work like this.

The duplication that hurt this agency was in the back end and the specification, not in having two clients. Consolidating three APIs into one and writing a single specification removed it, while native clients kept the platform accessibility support that riders using large text or a screen reader depend on daily.

Three things hold them together: one published API contract with contract tests running in CI, one functional specification that both clients implement, and a release process that ships a feature to both platforms together. Drift becomes visible in the same week rather than two years later.

In practice it means the app still works at large text sizes without cutting off a departure time, that VoiceOver and TalkBack can read a trip plan and a fare screen in a sensible order, and that a service alert is conveyed in text rather than by colour alone. We test that through the build rather than auditing at the end.

That was the point of the engagement. Clients own all code, designs, accounts and IP, and here the agency's developers took over the API, both apps and the deployment pipelines with a documented contract and a period working alongside our team before we stepped back.

We left them in place. The new API sits in front of scheduling, fares and service alerts and presents one interface to the apps, which meant no risky replacement of systems that were already working and let the agency retire or change those services later without touching either client.

Still have a question? Ask us when you request a quote

Let’s connect

Have a problem like this one?

Tell us what is not working. We’ll reply within one business day with how we would approach it and a tailored quote.

We’ll only use your details to prepare your quote. No lists, no spam.

Call us Request a quote
We use cookies for personalized content and ads, social features, and analytics. We share site usage data with our partners.
Cookies settings
Accept
Decline
Privacy & Cookie policy
Privacy & Cookies policy
Cookie name Active

Privacy Policy

What information do we collect?

We collect information from you when you register on our site or place an order. When ordering or registering on our site, as appropriate, you may be asked to enter your: name, e-mail address or mailing address.

What do we use your information for?

Any of the information we collect from you may be used in one of the following ways: To personalize your experience (your information helps us to better respond to your individual needs) To improve our website (we continually strive to improve our website offerings based on the information and feedback we receive from you) To improve customer service (your information helps us to more effectively respond to your customer service requests and support needs) To process transactions Your information, whether public or private, will not be sold, exchanged, transferred, or given to any other company for any reason whatsoever, without your consent, other than for the express purpose of delivering the purchased product or service requested. To administer a contest, promotion, survey or other site feature To send periodic emails The email address you provide for order processing, will only be used to send you information and updates pertaining to your order.

How do we protect your information?

We implement a variety of security measures to maintain the safety of your personal information when you place an order or enter, submit, or access your personal information. We offer the use of a secure server. All supplied sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our Payment gateway providers database only to be accessible by those authorized with special access rights to such systems, and are required to?keep the information confidential. After a transaction, your private information (credit cards, social security numbers, financials, etc.) will not be kept on file for more than 60 days.

Do we use cookies?

Yes (Cookies are small files that a site or its service provider transfers to your computers hard drive through your Web browser (if you allow) that enables the sites or service providers systems to recognize your browser and capture and remember certain information We use cookies to help us remember and process the items in your shopping cart, understand and save your preferences for future visits, keep track of advertisements and compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future. We may contract with third-party service providers to assist us in better understanding our site visitors. These service providers are not permitted to use the information collected on our behalf except to help us conduct and improve our business. If you prefer, you can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies via your browser settings. Like most websites, if you turn your cookies off, some of our services may not function properly. However, you can still place orders by contacting customer service. Google Analytics We use Google Analytics on our sites for anonymous reporting of site usage and for advertising on the site. If you would like to opt-out of Google Analytics monitoring your behaviour on our sites please use this link (https://tools.google.com/dlpage/gaoptout/)

Do we disclose any information to outside parties?

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property, or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

Registration

The minimum information we need to register you is your name, email address and a password. We will ask you more questions for different services, including sales promotions. Unless we say otherwise, you have to answer all the registration questions. We may also ask some other, voluntary questions during registration for certain services (for example, professional networks) so we can gain a clearer understanding of who you are. This also allows us to personalise services for you. To assist us in our marketing, in addition to the data that you provide to us if you register, we may also obtain data from trusted third parties to help us understand what you might be interested in. This ‘profiling’ information is produced from a variety of sources, including publicly available data (such as the electoral roll) or from sources such as surveys and polls where you have given your permission for your data to be shared. You can choose not to have such data shared with the Guardian from these sources by logging into your account and changing the settings in the privacy section. After you have registered, and with your permission, we may send you emails we think may interest you. Newsletters may be personalised based on what you have been reading on theguardian.com. At any time you can decide not to receive these emails and will be able to ‘unsubscribe’. Logging in using social networking credentials If you log-in to our sites using a Facebook log-in, you are granting permission to Facebook to share your user details with us. This will include your name, email address, date of birth and location which will then be used to form a Guardian identity. You can also use your picture from Facebook as part of your profile. This will also allow us and Facebook to share your, networks, user ID and any other information you choose to share according to your Facebook account settings. If you remove the Guardian app from your Facebook settings, we will no longer have access to this information. If you log-in to our sites using a Google log-in, you grant permission to Google to share your user details with us. This will include your name, email address, date of birth, sex and location which we will then use to form a Guardian identity. You may use your picture from Google as part of your profile. This also allows us to share your networks, user ID and any other information you choose to share according to your Google account settings. If you remove the Guardian from your Google settings, we will no longer have access to this information. If you log-in to our sites using a twitter log-in, we receive your avatar (the small picture that appears next to your tweets) and twitter username.

Children’s Online Privacy Protection Act Compliance

We are in compliance with the requirements of COPPA (Childrens Online Privacy Protection Act), we do not collect any information from anyone under 13 years of age. Our website, products and services are all directed to people who are at least 13 years old or older.

Updating your personal information

We offer a ‘My details’ page (also known as Dashboard), where you can update your personal information at any time, and change your marketing preferences. You can get to this page from most pages on the site – simply click on the ‘My details’ link at the top of the screen when you are signed in.

Online Privacy Policy Only

This online privacy policy applies only to information collected through our website and not to information collected offline.

Your Consent

By using our site, you consent to our privacy policy.

Changes to our Privacy Policy

If we decide to change our privacy policy, we will post those changes on this page.
Save settings
Cookies settings