Legally and literally: yes. Knowingly using a private API without authorization can fall under CFAA, contract law, copyright law, trespass to chattel, etc -- a

Legally and literally: yes. Knowingly using a private API without authorization can fall under CFAA, contract law, copyright law, trespass to chattel, etc -- and you can issue a C&D and/or sue for whatever is relevant.