Note that free software alone does not solve the problem. See:

http://www.gnu.org/philosophy/who-does-that-server-really-se...

Even if the software was free, Microsoft could still spy on you. (I'm planning on writing a much more detailed response about how this relates to free software and SaaS later today; I'm stuck at work for now.)