Private AppExchanges within an on-demand services environment in which multiple tenants have corresponding tenant identifiers (IDs) and the on-demand services environment is provided by an entity separate from the client entities. Access to a listing of apps is provided to a remote device based on a tenant ID associated with the user. The listing of apps for each tenant ID is controlled by an administrative entity associated with each respective tenant ID and. A download request is received from the remote device for a selected app from the listing. The remote device is allowed access only to the listing of apps having a tenant ID corresponding to the tenant ID for the remote device. Download access is granted to the remote device for a selected app in response to the download request. The code for the selected app is transmitted from a storage device to the remote device.