Yes. There is a client secret that has to be managed that can allow you to recover ecash using derivations but that default assumption is a client will manage and store the ecash data.