One thing you don't want to do however is to start breaking down your APIs by feature: for example, build a "side API" for Touch ID that only the iPhone app would call. This would very quickly make the whole system impossible to maintain and administer.