1. A mobile end-user device comprising: a wireless wide-area network (WWAN) modem, including signal processing elements, to communicate Internet service activity data with at least one WWAN; an application processing environment to execute device applications that each communicate Internet service activity data with one or more network servers via the WWAN modem and the WWAN; a secure processing environment in an Internet service activity data path between the application processing environment and the signal processing elements, the secure processing environment executing a service to generate first device data records (DDRs) reflecting a first data usage classification of Internet service activity data traversing the data path; a service processor agent to execute outside of the secure processing environment, the service processor agent operating to generate second DDRs reflecting a second data usage classification of Internet service activity data attributed to one or more device applications executing in the application processing environment; and one or more device agents to communicate the first and second DDRs to one or more network elements.