Systems, apparatuses, and methods are described for the management of network access. Implementations may utilize a data service, such as a virtual private network (VPN). A VPN may be configured to detect the situations in which a user may be attempting to circumvent a local network restriction. If a local network Wi-Fi gateway restricts Internet access, but a user device circumvents that gateway to reach another network, such as the VPN, via a different local connection (e.g., via a neighbor's Wi-Fi gateway, or a cellular data connection), then notifications may be sent to a controlling device, such as a parental device, which in turn can be used to deny access. A local gateway and/or a network connection management application comprising a VPN module on the user device may also cooperate in the detection of this circumvention.