Because then I could know that I could control where the data went.

It being open source doesn't mean you can mosify and run your own software on it and still have the agency accept you are compliant.