The data passes through any devices in the vicinity -- but they can't read the data unless they've got the private key to that tag.