So I have a peer to peer app that allows customers to request jobs at their own price and have the job fulfilled by a freelancer in the community. The common jobs requested as of recent are home improvement gigs and lawn care things. We plan on releasing a new feature that allows customers to request groceries through the app to be delivered to them as well.

Summary of The Problem

The grocery company we are using has open source documentation for parts of their api, however some of the documentation is missing components we need to successfully integrate the feature into our app. So for the missing components I have reverse engineered some components of the software that aren't included within the public documentation and plan on integrating it into our app. I haven't fully finished the reverse engineering, as I am a quarter of the way done but:

  • What legal implications does this hold?
  • If it is unlawful, what is the severity of the repercussions?
  • How long can I utilize this reverse engineering software before being caught?
  • Will I the implementer of the software be held accountable, or would the company be accountable on my behalf?

Thanks in advance.

  • Hi and welcome to RE.SE! Your question is very much going to elicit opinions. Also you should have separated the questions. Consider checking law for the first one (and possibly the second) of your questions. Keep in mind that any answer will be specific to the jurisdictions in which you act. Third one is pure guess work and not a good fit for Q&A. That said, for interoperability purposes RCE is often allowed.
    – 0xC0000022L
    Jan 9, 2019 at 10:39
  • note that if they didn't release a part as public, they might change it any time (if at all) without notifying you
    – user22970
    Jan 9, 2019 at 13:10

1 Answer 1


I (a random bloke on the internet) would do these:

  • read the EULA and terms&conditions. Do they explicitly prohibit/allow all/some parts of the API?
  • is the API you're using internal or merely undocumented?
  • depending on the country/jurisdiction you might not be able to use the results of RE. It can be questionable how much of an RE it is to guess the API endpoint.
  • contact the grocery API authors, maybe they're planning a public API for the features you need or maybe they can point you in the right direction without the need to call their private API.
  • talk to a lawyer. I don't want to make assumptions when I can end up with a fine or in jail.

As @Amirag mentioned the private API might be very unstable and if they break the compatibility your users will suffer blaming your app. And most likely leave a negative review and uninstall it.

  • Thank you. I will follow your instructions as my next steps. Jan 9, 2019 at 19:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.