They all claim “Your privacy is important to us.”
How can we know if that’s true?
With privacy washing being increasingly normalized, it becomes more and more difficult to evaluate who we can trust with our data.
This burden shouldn’t be on us, but until we get better institutions and regulations to protect us, we will have to protect ourselves.
There are signs we can look for to help. Red flags and green(ish) flags we can learn to spot, to get better at assessing who to trust 
I always think about this as:
“We care about your privacy! We don’t want anyone else to be able to sell the data we gather about you until we’ve sold it.”
Makes me wonder about Microsoft’s involvement with Github.
I am already looking for alternatives if any such exist.
These big companies poison everything they touch
Codeberg.
Selfhosted path: https://forgejo.org/
codeberg, gitlab
but for better or for worse, github is here to stay. Lucklliy git mirroring is a thing
Another (opinionated) git hosting alternative is sourcehut.