[philipn]

I believe a native mobile app would be able to make the request and scrap the data, regardless of CORS. Because basically no suspicious information is transmitted, it'd be pretty easy to squeeze past an app store review.

Of course, you could buy one of these services and have access, too.

[Groxx]

CORS is strictly browser-side enforced, so yes - any app can make this query and scrape the response.