A method, comprising: at a first device including at least one hardware processor: providing a first user interface on a display of the first device, wherein the first user interface includes general private data identifying at least one type of privacy-sensitive data to protect; receiving, via the first user interface, at least one specified privacy concern level for the at least one type of privacy-sensitive data; collecting at least one type of real-time data, determining which of the at least one type of real-time data is requested by an application associated with a second device offering one or more services; providing a second user interface on the display of the first device, wherein the second user interface identifies the at least one type of real-time data requested by the application; receiving, via the second user interface, at least one specified privacy concern level for the at least one type of real-time data; applying on-device reduction to a full risk analytics model to obtain a truncated risk analytics inference model based on the at least one specified privacy concern level for the general private data and the at least one specified privacy concern level for the at least one type of real-time data; determining an inference privacy risk level associated with transmitting the at least one type of real-time data to the second device based on the truncated risk analytics inference model, wherein the inference privacy risk level indicates a degree of risk of inferring the general private data from transmitting the at least one type of real-time data; displaying a third user interface on the display of the first device based on the determined inference privacy risk level being exceeded a predetermined threshold, wherein the third user interface comprises at least one notification for the determined inference privacy risk level; in response to receiving, via the third user interface, a request to protect the general private data, distorting at least a portion of the at least one type of real-time data based on the inference privacy risk level and on a service provider model representing correlations between previously transmitted data to the second device and services received in return from the second device before; and transmitting the distorted at least one type of real-time data to the second device to receive the one or more services. providing a first user interface on a display of the first device, wherein the first user interface includes general private data identifying at least one type of privacy-sensitive data to protect; receiving, via the first user interface, at least one specified privacy concern level for the at least one type of privacy-sensitive data; collecting at least one type of real-time data, determining which of the at least one type of real-time data is requested by an application associated with a second device offering one or more services; providing a second user interface on the display of the first device, wherein the second user interface identifies the at least one type of real-time data requested by the application; receiving, via the second user interface, at least one specified privacy concern level for the at least one type of real-time data; applying on-device reduction to a full risk analytics model to obtain a truncated risk analytics inference model based on the at least one specified privacy concern level for the general private data and the at least one specified privacy concern level for the at least one type of real-time data; determining an inference privacy risk level associated with transmitting the at least one type of real-time data to the second device based on the truncated risk analytics inference model, wherein the inference privacy risk level indicates a degree of risk of inferring the general private data from transmitting the at least one type of real-time data; displaying a third user interface on the display of the first device based on the determined inference privacy risk level being exceeded a predetermined threshold, wherein the third user interface comprises at least one notification for the determined inference privacy risk level; in response to receiving, via the third user interface, a request to protect the general private data, distorting at least a portion of the at least one type of real-time data based on the inference privacy risk level and on a service provider model representing correlations between previously transmitted data to the second device and services received in return from the second device before; and transmitting the distorted at least one type of real-time data to the second device to receive the one or more services.