Let’s assume that my app doesn’t send any device identifier to my server. But it uses firebase for sms authentication.

If a user logins, then enables VPN, reinstalls my app and now tries to login with a different phone number, how can I detect server side that it’s still the same device during the use of firebase flow?