Accessing a paid service by taking the API key out of another app without the consent of the service provider would be theft of services. In most US states theft of services falls under the same law as theft of personal property.