2

I don't know if this is the right place for this question or if there is a better one, if so, please forgive me :)

I recently bought an Apple Watch and soon enough found out that WhatsApp does not support the Watch, which made me kind of sad. Since i'm a software developer, I had the idea of simply building and distributing such an app through the app store for the other watch owners that felt the same. After searching a little bit, I found some code that I could get working which interacts with web.whatsapp.com, but also stumbled upon this repository where the developer seems to have gotten into trouble with the WhatsApp Inc.

Since I am not experienced in any kind of law (especially not american), I wanted to ask whether it is allowed to build such an app (in general). Where the boundaries of that are, especially for making profit of it, like: In-App-Advertisment, Donations or other ways of making profit. Another interesting thought on profit was to make a website that acts as landing page, that has advertisment on it, what about that ?

As far as I know I am also not allowed to use the Trademark "WhatsApp", any name that is close to "WhatsApp" or their logo or a logo that is looks too similar to the WhatsApp Logo ?

I know that are many questions and it's probably super specific, but that's why I would be even more stoked if somebody could answer them! Thanks in advance!

6
  • Where are you from? Intellectual property law regarding communication protocols may differ where you are and you may be able to respond to any such threats with a polite "go fsck your fs";).
    – abukaj
    Nov 15, 2022 at 11:53
  • @abukaj A protocol is not like software. It has no copyright and can only be protected by patents. Is it intellectual property? I think not. In the WhatsAPI code there is not one line of code from WhatsApp. Also see law.stackexchange.com/questions/86057/…
    – zomega
    Nov 15, 2022 at 18:40
  • 1
    It would be great if anyone could answer this question although it's very old. The answer should include how WhatsAPI could be taken down although it did not violate any copyrights (AFAIK). As I already said the protocol itself is not code but instead like a specification similar to FAT32, HTTP, JPEG or whatever. It cannot be copyrighted (see link in previous comment).
    – zomega
    Nov 15, 2022 at 18:45
  • @somega IANAL, so in my simplified worldview patents are a kind of intellectual property protection. Also Wikipedia lists patents as one of IP forms. Regarding WhatsAPI - you do not need to have legal basis to intimidate somebody with legal threat.
    – abukaj
    Nov 16, 2022 at 9:18
  • 1
    @somega I have no idea. The scan is a list of demands, with their basis omitted. But the code is still online, which means lawyers failed to deal with GitHub and a swarm of its users.
    – abukaj
    Nov 16, 2022 at 13:17

3 Answers 3

1

When you download any SDK, it will most likely come with a license that will tell you exactly what you are allowed to do with the SDK. You'd need to read the license. It will hopefully be designed to be interpreted correctly by non lawyers. To be safe, you'd need to present it to a lawyer and pay them for advice.

Without knowing details, it is impossible to say why exactly that other developer got into trouble for. If you can find out something, then you know what you should avoid. Best advice would be to not step on their toes, and to not do anything that would annoy the company.

1
  • I think I have missed something. What SDK do you refer to? As I understand, the problem was either/both that WhatsAPI was using a reverse-engineered WhatsApp protocol or/and named too similarly to the trademark.
    – abukaj
    Nov 15, 2022 at 11:45
0
+50

Intellectual property law is very convoluted when it comes to software. It is important to note the type of license associated with your software, as many publicly available SDKs and programs use the MIT license (in which monetization is legal), but many others also use the CCBY-4 license, which contains more restrictions on attribution, sales, and distribution.

It is also important to note the policy of the marketplace in which you intend on publishing your work. The App Store Developer Guidelines identify the following important considerations:

4.1 Copycats: Come up with your own ideas. We know you have them, so make yours come to life. Don’t simply copy the latest popular app on the App Store, or make some minor changes to another app’s name or UI and pass it off as your own. In addition to risking an intellectual property infringement claim, it makes the App Store harder to navigate and just isn’t fair to your fellow developers.

4.2 Minimum Functionality: Your app should include features, content, and UI that elevate it beyond a repackaged website. If your app is not particularly useful, unique, or “app-like,” it doesn’t belong on the App Store. If your App doesn’t provide some sort of lasting entertainment value or adequate utility, it may not be accepted.

4.2.6 Apps created from a commercialized template or app generation service will be rejected unless they are submitted directly by the provider of the app’s content.

Good luck!

For the bounty:

Can someone please explain, how WhatsAPI could be taken down (see github.com/venomous0x/WhatsAPI )? Is it illegal? What is the allegation?

The WhatsAPI closing statement references the Computer Fraud and Abuse Act (CFAA), components of which are codified in 18 USC 1030. Some potentially unlawful elements (in my opinion, none of which convincing), include:

Whoever—(5) (A) knowingly causes the transmission of a program, information, code, or command, and as a result of such conduct, intentionally causes damage without authorization, to a protected computer; (B) intentionally accesses a protected computer without authorization, and as a result of such conduct, recklessly causes damage; or (C) intentionally accesses a protected computer without authorization, and as a result of such conduct, causes damage and loss.

where computer is defined as:

(1) the term “computer” means an electronic, magnetic, optical, electrochemical, or other high speed data processing device performing logical, arithmetic, or storage functions, and includes any data storage facility or communications facility directly related to or operating in conjunction with such device, but such term does not include an automated typewriter or typesetter, a portable hand held calculator, or other similar device;

and where protected computer is defined as:

(2) the term “protected computer” means a computer— (A) exclusively for the use of a financial institution or the United States Government, or, in the case of a computer not exclusively for such use, used by or for a financial institution or the United States Government and the conduct constituting the offense affects that use by or for the financial institution or the Government; (B) which is used in or affecting interstate or foreign commerce or communication, including a computer located outside the United States that is used in a manner that affects interstate or foreign commerce or communication of the United States; or (C) that— (i) is part of a voting system; and (ii) (I) is used for the management, support, or administration of a Federal election; or (II) has moved in or otherwise affects interstate or foreign commerce...

Finally, civil remedy is authorized:

(g) Any person who suffers damage or loss by reason of a violation of this section may maintain a civil action against the violator to obtain compensatory damages and injunctive relief or other equitable relief.

3
  • The requirement for the bounty is to answer whether WhatsAPI itself is illegal and how it could be taken down (see bounty notes). This was not answered so I can't give it to you, sorry.
    – zomega
    Nov 17, 2022 at 19:18
  • @somega updated response
    – dreamforge
    Nov 17, 2022 at 20:18
  • Was WhatsAPI able to "access a protected computer without authorization"? That is, without proper credentials (username + password etc. - which README claims are used)? If so, that explains the lawyers are trying to takedown this project instead of fixing their shitty protocol comment. BTW: "a portable hand held calculator" includes a smartphone, does not it? ;)
    – abukaj
    Nov 18, 2022 at 8:22
0

But name WhatsAPI similarity to trademark WhatsApp I can see only one reason for which the project could be taken down (IANAL though). It is providing tool for spammers.

In the README of abdosumsam's fork spammers are addressed since Feb 20, 2013:

Foreword

F*** spammers. If you're one of them, or you operate shady marketing campaigns, please get lost.

In README of yuvadm's fork you can read:

Note July 30th, 2013

New policy:

I no longer provide support to users who are trying to send bulk messages using this API (i.e. a large amount of messages and not the built-in bulk message functionality). Sending advertisments on WhatsApp goes directly against their EULA and I have no way of determining whether the user is trying to send spam, advertising or sending mass messages to "opt-in users". And I also don't want to waste the little spare time that I have on trying to figure out ways to fuck up this beautiful ad-free platform called WhatsApp by enabling people to send spam. Everyone is free to use this API but there will be no more issue reports about being blocked after sending messages to semi-random users.

In the famous words of Heath Ledger as the Joker (taken completely out of context by me):

It's not about the money, it's about sending a message.

- shirioko

In the 7c41a8e32a7bc4e3e5f4319e06bf7429c0fb5140 commit to github/dmca repository you can find a DMCA takedown notice received by GitHub:

I have reviewed the infringing providers, content, and code ("content") posted or referred to on GitHub, and there continues to be an extensive amount of content that infringes on WhatsApp Inc.'s copyrights and trademarks. This continues to cause significant harm to WhatsApp.

By this email, please accept this formal notice and takedown request for the following content on the GitHub site. I am starting with these requests to ensure you will take action on our request. We will have follow-on requests, as the list of infringing content below is not exhaustive.

Specifically:

  1. The following URLs use of the WhatsApp name and logo, use of other WhatsApp content, unauthorized use of WhatsApp APIs, software, and/or services, and provision of software and services related to WhatsApp infringes on WhatsApp's copyrights and trademarks, including those related to WhatsApp's name and logo. WhatsApp's trademarks are registered in the United States and countries throughout the world.

  2. The initial infringing content is located at:

https://github.com/venomous0x/WhatsAPI

[a long list of other repositories]

  1. WhatsApp has a good faith belief that the infringing content is not authorized by WhatsApp, a WhatsApp agent, or the law.

  2. The information contained in this notice is accurate and, under penalty of perjury, I am authorized to act on behalf of WhatsApp, which is the owner of the exclusive copyright and/or trademark rights that are being infringed.

Please let me know if you have any questions. Also, I would appreciate your confirming that you have received this and whether you will take action to remove these providers and this content.

Thank you again very much for your time and assistance.

Sincerely,

[private]

General Counsel

WhatsApp Inc.

[private]

Since all forks are back at least since March 15th, 2014, it seems that the notice failed to have any long-term effect.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .