Companies might want to look at data, but so long as they aren't bribing teachers into sharing data from private repos, what can they do?