It's not encrypting the data - it's encrypting a sha256 of the data - thats just how a signature is made. the data will be sent in plaintext (encrypted by ssl of course) and the signature is just a method to validate that it's coming from the user with the private key so it can not be forged.