If the PoW difficulty is IP or subnet specific, then the IP addresses or subnets that hammer the server more can be given increasingly greater PoW requirements. The smartphones, assuming they're not being used as proxies, will have few requests, so the server can go very easy on them with the PoW difficulty.