Service recovery paradox