You can keep GPL changes private if you don't publish it, and the same applies to the original author. If you feed back changes, you're mutually bound.

But the problem with Facebook's license is not the copyright, it's the patent grant.