Netguard has per app blocking with logging/alerts, it's open source and on fdroid/play store.

People aren't going to like what they see. One that always annoyed me was a google services app pinging a geoip url everytime I connected to wifi.