private api vs public api