Hacker News Reader

I'm guessing it was http (not logged in or a Google search). I would assume they could also do it based on the IP/DNS.

Ok but how did they know it was her phone?

Her user name connected to the wifi.