These devices use Bluetooth Smart/LE (as opposed to traditional). It provides functionality more akin to RPC and Pub/Sub. But yes, it's easily implemented if documented, I've done a device to replicate another vendor's protocol for some basic IO.