the name/existence of private clones seem to be visible to everyone
I just created a private fork of a public repository, and it looks as if the fork is visible for others than myself (not the contents, but the fact that it exists, and its name and description). To see it, go to:
and click Forks/Queues.
Not that it matters much in this case, but I would expect private repositories to be truly private.