The present invention provides for managing communication of data from Internet-connected devices, such as those devices within an IoT environment. Specifically, the invention provides automated determination of which devices are communicating to which third-party entities and, in some embodiments, the type of data being communicated to such third-party entities. Once such information is known, the third-party entity can be automatically placed into a designated third-party category, which defines the type of data that the third-party entity is authorized to receive. In addition, a user can manage the communications from such devices by selecting to prohibit (i.e., block) or limit, based on data type, which data is communicated to which third-party entities. Additionally, the identity of the third-party entities can be authenticated/verified, such that if the third-party entity cannot be verified, communication of data to that entity is blocked or limited.