This web service asks me to login with my iTunes account, and after loging in, they detected all of my past purchased iPhone applications. I also received an email from Apple few days later, to change my iTunes account password for safety.<p>Are they using illegal or near illegal method to detect its users purchase history? Or Are they using official API provided by Apple to do so?