Well, zaps are supposed to be public, but you could send ecash through encrypted messages, for sure.