Analytics are collected to monitor and report data usage of enterprise applications running on a mobile device. A second line service agent and an analytics agent assure that the mobile device is configured for analytics collection. Once configured, cellular data usage of applications that are monitored by the analytics engine are detected and a VPN connection is established for routing the communications between the monitored app an a public website. If the mobile device switches to WiFi usage, the analytics agent disconnects the VPN connection and routes data directly to the public website. Thus, data usage of the monitored applications can be reported by the VPN gateway.