Why is google endpoint method failing?

Question

A NullPointerException occurs on the indicated line of my endpoint api method when called by the android client but not when called from the api explorer:

@ApiMethod(name = "publishReview", path = "publish-review", httpMethod = ApiMethod.HttpMethod.POST)
public Review publishReview(@Named("userId") final String id, ReviewForm reviewForm) {
    Key<Profile> profileKey = Key.create(Profile.class, id);

    final Key<Review> reviewKey = factory().allocateId(profileKey, Review.class);

    final Long reviewId = reviewKey.getId();

    Profile user = ofy().load().key(profileKey).now();

    Review review = new Review(reviewId, id, reviewForm);
    user.addToMyReviews(reviewId); // NULLPOINTER HERE
    ofy().save().entities(review, user).now();

    return review;
}

Here is addToMyReviews(Long reviewId):

public void addToMyReviews(final Long reviewId) {
    if (!myReviews.contains(reviewId))
        myReviews.add(reviewId);
}

Here is the android client side call of the endpoint method:

public static class PublishReview extends AsyncTask<Void, Void, String> {

    private static MyApi myApiService = null;
    private ReviewForm mReview;
    private final String mUserId;
    private Context mContext;

    public PublishReview(final String userId, ReviewForm review, Context context) {
        mReview = review;
        mUserId = userId;
        mContext = context;
    }

    @Override
    protected String doInBackground(Void... params) {
        if (myApiService == null) {  // Only do this once
            MyApi.Builder builder = new MyApi.Builder(AndroidHttp.newCompatibleTransport(),
                    new AndroidJsonFactory(), null)
                    // options for running against local devappserver
                    // - 10.0.2.2 is localhost's IP address in Android emulator
                    // - turn off compression when running against local devappserver
                    .setRootUrl("http://10.0.2.2:8080/_ah/api/")
                    .setGoogleClientRequestInitializer(new GoogleClientRequestInitializer() {
                        @Override
                        public void initialize(AbstractGoogleClientRequest<?> abstractGoogleClientRequest) throws IOException {
                            abstractGoogleClientRequest.setDisableGZipContent(true);
                        }
                    });
            myApiService = builder.build();
        }

        try {
            return myApiService.publishReview(mUserId, mReview).execute().getTitle();
        } catch (IOException e) {
            e.printStackTrace();
            return null;
        }
    }

    @Override
    protected void onPostExecute(String title) {
        Toast.makeText(mContext, title + " published", Toast.LENGTH_LONG).show();
    }
}

The mUserId and mReview variables on the client side are not null when passed into the endpoint method as params.

How do I fix this error?