Never give your private key away 
Have you ever try using some exchanges that give private key like etherdelta? Etherdelta is a very legit trading site but they required your private key in order to access their website. I import my mew to metamask and etherdelta automatically connect to metamask. Does it mean I gave them the private key?