You can absolutely deny apps internet access. I do it for the Google Keyboard app.