In that regard, its not about risk. Yes, using 3rd party API for your business model is risky, but thats a secondary effect. The major issue is than the future of the company, and any promises and investments done is completely dependent on that third-partys' whims. To some degree, your even in less control than if you were employed for the 3rd party company, as there are employment laws to protect employees, but no laws in place to protect you against changes by the 3rd party to the API.