A first device may receive a toll-free data request that includes an application signature. The toll-free data request may request that a first entity be billed for data usage by a second device associated with a second entity, and may be received from an application. The first device may decrypt the application signature to obtain a device identifier and an application identifier. The first device may validate the application signature based on the device identifier and the application identifier. The first device may selectively cause the first entity or the second entity to be billed for data usage associated with the toll-free data request based on a result of validating the application signature.