How does an advertiser create a blacklist of apps and sites where their ads will never serve?

Create a list of negative keywords, and set it as a blacklist for that advertiser.
Create a channel of URLs and apps, and set it as a blacklist for that advertiser.
Create a spreadsheet of URLs and apps, and share it with your account manager.
Enable the API for blacklisted channels, and submit through a structured data file.