I think OP's point was that GitHub=Microsoft, so you're effectively sending your code to Microsoft in one way or another. Although the licensing/privacy policies are probably different for private repositories.