hacking around public and private data in API