I want to ensure that the app is just locally computing the decibel level, rather than streaming out data about what it's hearing.

I would ideally want websites to also have a "no more network access after your initial load" mode, but as you say that's fundamentally incompatible with modern web development. So I kinda just accept the loss there.