I have a mobile application and the backend is hosted on a cloud provider. I would like to ask for feedback on encrypting all REST API calls that will be used to communicate with the server, if we should or we shouldn't do it.

*Adding details:*

< Certificate pinning is in place >

for example instead of having a proper rest object

    {
       "name" : "username",
       "info" : "profile"
    }

make it similar to this:

    {
       "encryptedData" : "Mq6rTVdPP1YMlE9AxhnryIRX+JA9MfIXv"
    }

and after decryption it becomes the model and the flow carries on, of course the response is also expected to be encrypted in a similar fashion.