[samstave]

Simple question: We have firewall capability on every computer.

I am surprised that we don't have a FW on a phone - or an app that can be installed which I can force all traffic from the phone to pass through, with source-app and destination IP/App/Service - and choose to block the traffic we would like.

Are the devices capable of this?

[hyperdunc]

If you have a rooted Android phone, use AFWall. It's available on F-Droid and Google Play and uses the hosts file.

If not rooted then use NetGuard (as mentioned in another comment). It sets up a local VPN on your phone to filter traffic.

Other apps also use the local VPN approach for different reasons, e.g. DNS66 allows you to specify your own DNS servers. You'll only be able to use one VPN app at a time.

[Gigamo]

Check out NetGuard: https://f-droid.org/en/packages/eu.faircode.netguard/

[jkl1x]

+1 for NetGuard. I just started using it recently on a new phone and it was the first thing I installed before connecting the device to any network. You would be amazed how many apps try to make a connection to graph.facebook.com

Check out Exodus Privacy[1] to see what trackers are inside a certain app.

One could use F-Droid and Yalp Store[2] to try and have a bit more privacy on an Android phone and make it work without a Google account.

[1] https://exodus-privacy.eu.org/en/ [2] https://github.com/yeriomin/YalpStore

[amoshi]

Too bad it works by creating a local VPN - I'm already using "Block This!" to block ads on my device which also works via a VPN, so you can't use both at the same time.

[thisacctforreal]

I wonder if it's possible to create an app that creates a local VPN that routes through the other VPNs.