This is an indicator that some of the DNS traffic from that phone is going to a DNS server other than Pi-hole. You can verify this by tailing the pihole.log (pihole -t from the terminal is the best method), and open a web page on the browser on the phone. If you don't see a large burst of activity from that phone, then the phone is resolving DNS queries elsewhere.