That's difficult to argue given the app underlying it knowingly makes these requests. It's arguable that he could be reverse engineering the API to make a comp

That's difficult to argue given the app underlying it knowingly makes these requests. It's arguable that he could be reverse engineering the API to make a compatible client - I think that should be legal, although IANAL.