How can I protect the data my service provides to my application from tools like Fiddler? Or at least prevent someone making many requests to my service (like maximum requests per minute, IP/MAC Address blacklist, etc).
You could use the Throttling Handler for ASP.NET Web API announced by Stefan Prodan recently. Details can be found in the article here.