You also can count how timer device is power on. Store that value in EEPROM.
And you can check some unused eeprom address. And if device is powered xy times, and value on that address is FF then STOP. When thy pay you, send them another hex with correct value on that address. Or just make some combination of button that must be pressed at power up to write correct value in eeprom, and unprotect device.