i don't think there is a big difference. without their content[1], his app is nothing; the web browser is still a web browser.
[1]: it's irrelevant whether the school or the partner owned it, he did it without permission (and i highly doubt the reader has the license to do whatever they wanted with that data either).
[1]: it's irrelevant whether the school or the partner owned it, he did it without permission (and i highly doubt the reader has the license to do whatever they wanted with that data either).