you want a bell-lapadula [0] style security labeling model on the phone, i think. it would only allow allow write-up (copy data from insecure to secure side) and read-down (view data on insecure side from secure) mechanisms.

0. https://en.wikipedia.org/wiki/Bell%E2%80%93LaPadula_model