"no-root firewalls" to control data flows on devices (sorry for not publicly naming my preferred one).