LBE Privacy Guard allows root'd user to manage app permissions, power use, boot apps, sms/call filter/blocking, system [ram] optimization, etc. Unlike "permissions denied" unsavory permissions are not simply revoked -- no apps ever FC because of LBE. Provides limited data spoofing (data faking). These powers have been submitted to Cyanogenmod but were not approved to the chagrin of power users.
Keep track of app data use, be prompted on permission use attempt, grant or deny, or apply permanently. New version uses iptables for net control, versions of android prior to froyo use guid firewall (froyo forward really needs this as an option again).
For best results combine LBE Privacy Guard | LBE Security Master with AdAway and DroidWall.
Google market NOT required: direct download option. Closed source, but freeware. The app requests internet access but it works if denied.