Is there a way to control app execution environment?
The Android Emulator can be run on your PC and is good for testing.  You could use tools to sniff the data being sent on your network and see if it's encrypted, and check files written to the "device" storage.  But you can't "control" the app per se.