A processing system in a network identifies first and second endpoint devices subscribed to a data plan that allows the first and second user endpoint devices to transmit and receive a shared, allotted amount of data through the network. A first subset of application data associated with the data plan is classified by parsing metadata associated with the application data to identify a first group of applications to or from which the application data was sent. A second subset of the application data is classified by parsing network data associated with the application data to identify a second group of applications to or from which the application data was sent. A report indicates respective portions of the allotted amount of data consumed by individual applications in the first and second groups of applications, and how much of the respective portions were consumed by the first and second user endpoint devices.